EIP-2026-108166

This is a vulnerability writeup describing a remote file inclusion (RFI) vulnerability in the 'mod_forum' component for Joomla and Mambo. The issue arises due to improper sanitization of user-supplied input in the 'phpbb_root_path' parameter, allowing arbitrary remote file inclusion.