EIP-2026-113055

The provided text describes a local file inclusion (LFI) vulnerability in Vespa 0.8.6, where unsanitized user input in the 'include' parameter of 'getid3.php' allows attackers to read arbitrary files or execute local scripts. The exploit leverages a null byte (%00) to bypass input validation.