EIP-2026-111465

This exploit demonstrates a remote file inclusion vulnerability in Pragyan CMS 2.6.4 due to improper handling of user-supplied input in the 'moduleFolder' and 'sourceFolder' parameters. The vulnerability allows an attacker to include arbitrary remote files, potentially leading to remote code execution.