EIP-2026-105827

The provided text describes a remote file inclusion vulnerability in chillyCMS 1.2.1, where insufficient input sanitization allows attackers to include arbitrary files via the 'file', 'path', or 'fullpath' parameters in 'helpers.include.php'.