EIP-2026-110232

This is a writeup describing a local file inclusion (LFI) vulnerability in Open Realty 2.5.6. The vulnerability allows an attacker to include arbitrary local files by manipulating the 'select_users_lang' parameter.