EIP-2026-112804

This is a functional remote file inclusion (RFI) exploit for ttCMS_v5. It constructs a malicious URL by injecting a remote shell via the 'SYSURL[root]' parameter in the 'inc.header.php' file.