EIP-2026-107758

The exploit demonstrates a remote file inclusion vulnerability in IDevSupport iSupport 1.8 due to insufficient sanitization of the 'cons_root' parameter in index.php. An attacker can include arbitrary remote files, potentially leading to remote code execution.