EIP-2026-112701

This is a vulnerability writeup describing remote file inclusion (RFI) vulnerabilities in Tiny Web Gallery. It outlines how an attacker can include arbitrary remote files containing malicious PHP code via unsanitized input in the 'image' parameter.