EIP-2026-111893

This exploit targets SAPID CMS 123 rc3 by leveraging a remote file inclusion vulnerability in `get_infochannel.inc.php` and `get_tree.inc.php` due to unsanitized `$root_path` and `$GLOBALS["root_path"]` variables. It allows remote command execution by including a malicious file from an attacker-controlled server.