EIP-2026-112714

This exploit demonstrates an authentication bypass and arbitrary file read vulnerability in TinyPHPForum v3.61, allowing an attacker to read sensitive files (e.g., admin hash) and execute arbitrary PHP code by manipulating the registration process to create a malicious file.