EIP-2026-112828

This exploit demonstrates a remote PHP code-injection vulnerability in txtForum by manipulating the 'skin' parameter in a login form to inject arbitrary code via a malicious URL. The form auto-submits using JavaScript, allowing an attacker to execute arbitrary PHP code on the target system.