EIP-2026-110227

This is a vulnerability writeup describing multiple remote file-include vulnerabilities in Open Educational System 0.1 beta and prior versions. The issue arises from insufficient sanitization of user-supplied data in the CONF_INCLUDE_PATH parameter.