EIP-2026-110425

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Ovidentia Module troubletickets 7.6 due to the unsanitized use of the GLOBALS[babInstallPath] parameter in statistique_evolution.php. An attacker can inject arbitrary PHP code via the GLOBALS[babInstallPath] parameter to achieve remote code execution.