EIP-2026-107601

This exploit demonstrates local and remote file inclusion vulnerabilities in hMailServer 4.4.2's PHPWebAdmin. It leverages path traversal and improper input validation to include arbitrary files, potentially leading to remote code execution or sensitive information disclosure.