EIP-2026-106870

This exploit demonstrates a Remote File Include (RFI) vulnerability in EncapsCMS <= 0.3.6 due to improper input validation in the 'config[path]' parameter in common_foot.php. An attacker can include arbitrary remote files, potentially leading to remote code execution.