EIP-2026-106080

This exploit demonstrates a remote file inclusion vulnerability in Comment IT's class_admin.php and class_comments.php. The vulnerability arises from unsanitized user input in the PathToComment parameter, allowing remote code execution via malicious file inclusion.