EIP-2026-111234

This exploit demonstrates multiple remote file inclusion vulnerabilities in PhpwCMS 1.2.6 due to improper handling of the `spaw_root` parameter. Attackers can include arbitrary remote files, leading to potential remote code execution.