EIP-2026-108029

The exploit demonstrates a file creation and command execution vulnerability in JAF CMS 4.0 RC2 via unsanitized input in the '/module/log/vislog.php' script. It also includes a remote file inclusion vulnerability in '/module/forum/main.php' and '/module/forum/forum.php' when register_globals is enabled.