EIP-2026-110937

The provided text describes a remote file-include vulnerability in basicFramework 1.0 due to insufficient input sanitization. It allows an attacker to include arbitrary files via the 'root' parameter in includes.php.