EIP-2026-111871

This is a writeup describing a remote file inclusion vulnerability in Sahana Agasti <= 0.6.4. The vulnerability allows an attacker to include arbitrary files via the 'global[approot]' parameter in specific PHP scripts.