EIP-2026-110471

This is a vulnerability writeup describing a remote file inclusion (RFI) vulnerability in Papoo CMS 3.0.2. The issue arises due to improper sanitization of user-supplied input in the 'tinyMCE_imglib_include' parameter, allowing an attacker to include and execute arbitrary remote PHP code.