EIP-2026-111085

This exploit leverages a Local File Inclusion (LFI) vulnerability in PHPizabi's chat module to achieve Remote Command Execution (RCE) by polluting log files via the User-Agent header. It bypasses the need for register_globals by using log file inclusion and timestamp manipulation.