EIP-2026-111227

The exploit demonstrates a remote file inclusion vulnerability in PHPTreeview due to insufficient sanitization of user-supplied input. An attacker can include a remote shell by appending a malicious URL parameter to 'treeviewclasses.php'.