EIP-2026-107545

The exploit demonstrates a remote file inclusion vulnerability in H0tturk Panel due to improper input sanitization. An attacker can include and execute arbitrary remote PHP code via the 'cfgProgDir' parameter in 'gizli.php'.