EIP-2026-113294

This is a vulnerability writeup describing multiple remote file inclusion vulnerabilities in WeBid <= 0.7.3 RC9. The vulnerabilities are due to improper input validation in the '$include_path' parameter in several PHP files, requiring 'register_globals' to be enabled.