EIP-2026-107761

This is a Metasploit module exploiting a Local File Inclusion (LFI) vulnerability in IF-CMS 2.07 via the 'newlang' parameter in index.php. It leverages session file inclusion to execute arbitrary PHP code, achieving remote code execution (RCE).