EIP-2026-105054

This exploit demonstrates a Local File Include (LFI) vulnerability in the Ajax framework by Zapatec. The PoC shows how an attacker can read arbitrary files (e.g., /etc/passwd) by manipulating the 'lang' parameter with directory traversal sequences.