EIP-2026-111901

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in SaurusCMS <= 4.6.4. The vulnerability arises from insecure inclusion of PHP files via the 'class_path' parameter in two specific files, allowing an attacker to include arbitrary remote files.