EIP-2026-114662

This exploit demonstrates a remote file inclusion vulnerability in FlashChat <= V3.1 due to improper input validation in the 'adminlog' parameter. The exploit allows an attacker to include and execute arbitrary remote PHP code by manipulating the 'cfg[autolink]' and 'adminlog' parameters.