EIP-2026-109849

The code describes multiple SQL injection and XSS vulnerabilities in nconf 1.3, including specific parameters and code snippets demonstrating lack of input sanitization. It also mentions a local path disclosure vulnerability.