EIP-2026-113165

This Perl script exploits a Remote File Inclusion (RFI) vulnerability in W-Agora <= 4.2.0 by injecting a malicious URL into the 'inc_dir' parameter of 'forgot_password.php'. It allows remote command execution via a user-provided command shell.