EIP-2026-110410

This Perl script exploits a remote file inclusion vulnerability in Ottoman CMS <= 1.1.3 by injecting a malicious 'default_path' parameter via POST requests, allowing arbitrary PHP code execution. It requires 'register_globals' to be enabled on the target system.