EIP-2026-111256

The code describes a remote file inclusion vulnerability in PHP_News 2.0 due to improper input sanitization. An attacker can exploit this by manipulating the 'language' parameter to include arbitrary remote files, leading to remote code execution.