EIP-2026-108486

This exploit demonstrates a Remote File Include (RFI) vulnerability in the Joomla component com_ponygallery. The vulnerability allows an attacker to include arbitrary remote files by manipulating the 'mosConfig_absolute_path' parameter in two different PHP files.