EIP-2026-109032

The entry describes a file inclusion vulnerability in Rolis Guestbook 1.0, where an attacker can manipulate the 'path' parameter in 'insert.inc.php' to include and execute arbitrary remote files. The vulnerability is due to insufficient input validation, allowing remote code execution.