EIP-2026-111173

This exploit demonstrates a remote file inclusion vulnerability in PHPMyTGP 1.4b due to insufficient input sanitization. An attacker can include a remote shell by manipulating the 'msetstr["PROGSDIR"]' parameter.