EIP-2026-113006

The document describes multiple remote file inclusion (RFI) vulnerabilities in vBulletin 4.1.7 due to improper input sanitization. It lists various endpoints where an attacker can inject malicious file paths to execute arbitrary code or disclose sensitive information.