EIP-2026-109071

The exploit describes a remote file inclusion vulnerability in lastRSS autoposting bot MOD 0.1.3 due to improper input sanitization. An attacker can inject arbitrary PHP code via the 'phpbb_root_path' parameter, leading to remote code execution.