EIP-2026-110928

This is a writeup detailing multiple remote file inclusion vulnerabilities in PHP Auction System. The vulnerabilities are due to improper validation of the 'include_path' and 'lan' parameters, allowing remote file inclusion.