EIP-2026-102292

The document details two vulnerabilities in Remote File Manager v1.2 for iOS: a local file include vulnerability via POST request and a persistent input validation vulnerability. Both vulnerabilities are exploited through the filename parameter in the file upload module, allowing unauthorized file access and script injection.