EIP-2026-106488

The provided text describes a remote file inclusion vulnerability in DoceboLMS, where unsanitized user input allows an attacker to include arbitrary remote PHP files. The example URL demonstrates the exploitation vector via the 'lang' parameter.