EIP-2026-108999

The writeup describes a remote file inclusion vulnerability in Kietu's 'index.php' script, allowing attackers to execute arbitrary PHP scripts by manipulating the 'config.php' include path via the 'kietu[url_hit]' parameter.