EIP-2026-113223

The exploit demonstrates a file inclusion vulnerability in Web Server Creator Web Portal, allowing remote attackers to include arbitrary PHP scripts via manipulated 'l' and 'pg' parameters in customize.php and index.php, respectively. This leads to remote code execution with webserver privileges.