EIP-2026-113449

The provided text describes a local file inclusion (LFI) vulnerability in WM-News version 0.5, where unsanitized user input allows an attacker to read arbitrary files on the system. The example URL demonstrates accessing '/etc/passwd' via path traversal.