EIP-2026-112629

This exploit demonstrates a remote file inclusion vulnerability in Thatware <= 0.5.3, where the `root_path` parameter in multiple PHP files can be manipulated to include arbitrary remote files, leading to remote code execution.