EIP-2026-105337

The code describes a local file inclusion (LFI) vulnerability in awiki 20100125, where unsanitized user input allows attackers to read arbitrary files (e.g., /etc/passwd) via the 'page' or 'scriptname' parameters. The vulnerability is due to improper input validation in the PHP script.