EIP-2026-106088

This exploit demonstrates a remote file inclusion vulnerability in Community CMS 0.1 by injecting a malicious URL into the 'root' parameter, allowing arbitrary PHP code execution. The PoC requires register_globals to be enabled and targets the include.php page.