EIP-2026-112385

This is a vulnerability writeup describing a remote file inclusion (RFI) vulnerability in SPiD, a PHP-based gallery management application. The issue arises due to insufficient input validation in the 'lang_path' parameter, allowing an attacker to include arbitrary remote files.