EIP-2026-114491

This exploit demonstrates a Remote File Include (RFI) vulnerability in Xtreme/Ditto News v1.0, allowing an attacker to include and execute arbitrary remote scripts via the 'fil_config' parameter in the 'post.php' file.