EIP-2026-109599

The exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Mp3 Online Id Tag Editor by manipulating the 'determined_format[include]' parameter in two PHP scripts. The attacker can include arbitrary remote files, potentially leading to remote code execution.