EIP-2026-105856

The provided text describes a local file inclusion (LFI) and SQL injection vulnerability in CitrusDB 2.4.1. It includes a proof-of-concept URL demonstrating the LFI vulnerability to access arbitrary files on the server.