EIP-2026-110601

The exploit describes a local file inclusion vulnerability in Phorum due to improper input validation in the 'common.php' file. An attacker can manipulate the 'f' parameter to include arbitrary PHP files, potentially exposing sensitive information such as database credentials.