EIP-2026-109000

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Kietu? <= v4.0.0b2z due to improper input validation in the 'url_hit' parameter in hit.php. The exploit allows an attacker to include and execute arbitrary remote PHP code by manipulating the parameter.