EIP-2026-112115

This exploit leverages a remote PHP file execution vulnerability in Simple Machines Forum (SMF) <= 1.1.8 by allowing an attacker to set a malicious PHP file as their avatar. When other users view the topic, the PHP file is executed, leading to information theft or other malicious actions.