EIP-2026-112012

This is a writeup detailing a remote file inclusion (RFI) vulnerability in Shadowed Portal 5.7 and lower. The vulnerability arises from unsafe use of the 'require' function in 'control.php', allowing an attacker to include arbitrary PHP files via directory traversal and external URLs.