EIP-2026-106551

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in dotProject <= 2.0.3 by manipulating the 'baseDir' parameter in the 'db_adodb.php' file to include arbitrary remote files. The attack vector is straightforward and leverages improper input validation.