EIP-2026-105546

This exploit demonstrates a local file inclusion vulnerability in bloofoxCMS 0.5.0, allowing an attacker to read arbitrary files by manipulating the 'fileurl' parameter. The vulnerability arises from insufficient input validation in the 'inc_settings_editor.php' file.