EIP-2026-105524

The provided text describes a remote file inclusion vulnerability in Blog:CMS, where unsanitized user input in the 'gallery' and 'image' parameters of thumb.php allows arbitrary remote file inclusion. This can lead to remote code execution in the context of the webserver process.