EIP-2026-114512

The exploit demonstrates a remote file inclusion (RFI) vulnerability in yappa-ng by manipulating the 'config[path_src_include]' parameter in multiple PHP scripts. This allows remote attackers to include and execute arbitrary PHP scripts from external sources.