EIP-2026-113020

This PHP script exploits a remote file inclusion vulnerability in vBulletin's ImpEx module by injecting a malicious PHP file via the 'systempath' parameter. It allows remote command execution by writing a payload to a local file and then including it through the vulnerable endpoint.