EIP-2026-110673

This exploit demonstrates a remote file inclusion vulnerability in PHP Content Architect due to insufficient sanitization of user-supplied data. An attacker can include a remote shell by manipulating the 'tpls[1]' parameter in the URL.