EIP-2026-111406

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Popper <= v1.41 due to improper input validation in childwindow.inc.php. The PoC shows how an attacker can include a remote shell by manipulating the 'form' parameter.