EIP-2026-111142

This exploit demonstrates a Remote File Include (RFI) vulnerability in phpMyAgenda <=3.0 Final. The vulnerability allows an attacker to include and execute arbitrary remote files by manipulating the 'rootagenda' parameter in 'agenda.php3' or 'agenda2.php3'.