EIP-2026-110422

This exploit targets a Remote File Inclusion (RFI) vulnerability in Ovidentia maillist 4.0 by manipulating the `GLOBALS[babInstallPath]` parameter in `mlincl.php` to include a remote shell. The PoC uses JavaScript to construct the malicious URL and submit it via a form.