EIP-2026-109160

The exploit demonstrates a remote file inclusion vulnerability in Linkspider 1.08 by manipulating the _SERVER[DOCUMENT_ROOT] parameter to include arbitrary remote files. This can lead to remote code execution if the attacker controls the included file.