EIP-2026-108048

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Jaws 0.5.2 due to the lack of proper declaration of the GLOBALS["path"] variable. The exploit allows an attacker to include a remote script by manipulating the 'path' parameter in the JawsDB.php file.