EIP-2026-106046

The exploit demonstrates a remote file inclusion vulnerability in CodeIgniter 1.0 due to insufficient sanitization of user-supplied data in the BASEPATH parameter. Attackers can include arbitrary files, potentially leading to remote code execution.