EIP-2026-107075

This exploit demonstrates multiple remote file inclusion (RFI) vulnerabilities in FestOs <= 2.2.1. The vulnerabilities arise from unsanitized user input in the 'ABSOLUTE_FILE_PATH' parameter, allowing an attacker to include arbitrary remote files.