EIP-2026-106702

The exploit demonstrates a remote file inclusion (RFI) vulnerability in Easy Web Portal 2.1.2 by injecting a malicious URL via the 'chemin' parameter in i-accueil.php and i-index.php. This allows an attacker to execute arbitrary commands (e.g., 'id') by including a remote shell script (c99.txt).