EIP-2026-114616

The exploit demonstrates a remote file inclusion vulnerability in Zentrack's index.php script due to insufficient sanitization of user-supplied variables. Attackers can include malicious PHP files or read arbitrary files on the server via crafted URLs.