EIP-2026-111591

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Puntal 2.1.0. The vulnerability arises from improper input validation in the 'app_path' or 'puntal_path' parameters in index.php, allowing an attacker to include arbitrary remote files.