EIP-2026-109479

This Perl script exploits a Remote File Include (RFI) vulnerability in mini CMS / News Script Light 1.0 by injecting a malicious URL into the 'script_pfad' parameter in news_base.php. It sends a crafted POST request to include and execute a remote shell script.