EIP-2026-112174

The exploit demonstrates a file inclusion vulnerability in 'lire.php' due to improper input validation of the 'rub' parameter, allowing remote file inclusion when 'register_globals' is enabled. It also includes a file upload vulnerability in 'upload.php' that permits unauthorized file uploads.