EIP-2026-114373

This exploit demonstrates a Remote File Include (RFI) vulnerability in WoW Roster's phpbb.php script, allowing an attacker to include and execute arbitrary remote code via the 'subdir' parameter. The exploit is straightforward and leverages a common RFI attack vector.