EIP-2026-109009

This exploit demonstrates a remote file inclusion (RFI) vulnerability in KimsQ 040109, allowing an attacker to include and execute arbitrary remote scripts via manipulated 'path' or 'bbs[skin]' parameters in multiple endpoints.