EIP-2026-112417

The exploit demonstrates a remote PHP file inclusion vulnerability in Download Center Lite 1.5 due to unsanitized user input in the 'script_root' parameter. An attacker can include arbitrary remote PHP files by manipulating the parameter in the URL.