EIP-2026-105448

The entry describes a remote file inclusion vulnerability in BES-CMS versions 0.4 rc3 and 0.5 rc3, where an attacker can include malicious files via the 'PATH_Includes' parameter in multiple scripts. The provided URL demonstrates the exploit vector but lacks functional exploit code.