CVE-2009-4154

This exploit demonstrates a directory traversal vulnerability in Elxis CMS by manipulating the 'filename' parameter in feedcreator.class.php to access arbitrary files, such as /etc/passwd. The attack leverages insufficient input sanitization to read sensitive system files.