EIP-2026-104802

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in 1024 CMS Version 1.1.0 beta. The vulnerability arises from unsanitized user input in the 'filename' parameter of force_download.php, allowing arbitrary file reads.