EIP-2026-113145

The entry describes a remote PHP file inclusion vulnerability in VoteBox 2.0 due to unsanitized input in the 'votebox.php' script. Attackers can exploit this by injecting a malicious URL via the 'VoteBoxPath' parameter to execute arbitrary PHP code.