EIP-2026-111769

This exploit demonstrates multiple vulnerabilities in rgboard v4 (07.07.27), including XSS, LFI, and RFI. The XSS vulnerability allows cookie theft, while the LFI and RFI vulnerabilities enable file inclusion attacks. The provided PoC includes a script to change a user's password to '12345' via XSS.