EIP-2026-111258

The exploit demonstrates a remote file inclusion vulnerability in PHP_News 2.0 due to improper input sanitization. An attacker can execute arbitrary server-side script code by manipulating the 'language' parameter in the URL.