EIP-2026-106387

This is a writeup describing a remote file inclusion vulnerability in DCP-Portal. The vulnerability allows an attacker to include arbitrary remote files by manipulating the 'root' parameter in the 'lib.php' script, potentially leading to remote code execution.