EIP-2026-105602

This Python script exploits a local file inclusion vulnerability in Boss Mini 1.4.0 by sending a crafted POST request to the '/boss/servlet/document' endpoint with a URL-encoded file path. The script retrieves the contents of the specified local file if the server responds with a 200 status code.