EIP-2026-110419

This exploit demonstrates a Remote File Include (RFI) vulnerability in Ovidentia Module absences 2.64. The vulnerability arises from the unsanitized use of the $GLOBALS['babInstallPath'] parameter in a require_once statement, allowing an attacker to include and execute arbitrary PHP code.