EIP-2026-105179

The exploit demonstrates a local file inclusion (LFI) vulnerability in AneCMS 1.0 due to improper input sanitization. Attackers can traverse directories and include sensitive files like '.htaccess' via null-byte termination in the 'module' or 'ajax' parameters.