EIP-2026-106337

The exploit demonstrates a remote file inclusion vulnerability in DaFun Spirit 2.2.5, where the `lgsl_path` parameter is used to include arbitrary remote files, leading to potential remote code execution.