EIP-2026-107939

This is a writeup describing a Local File Inclusion (LFI) vulnerability in the nvisionix Roaming System Remote metasys 0.2. The vulnerability is due to improper handling of the 'globalIncludeFilePath' parameter in 'system/default.php', allowing an attacker to include arbitrary files when 'register_globals' is enabled.