EIP-2026-105428

The provided text describes a remote file inclusion vulnerability in the 'bcoos' program version 1.0.13, where improper input sanitization allows an attacker to include and execute arbitrary remote PHP code. The example URL demonstrates how an attacker could exploit this vulnerability by manipulating the 'XOOPS_ROOT_PATH' parameter.