EIP-2026-105980

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in CMS Made Simple <= 1.6.2. The vulnerability arises from the `GetURLContent` function, which uses `file_get_contents` without proper input validation, allowing an attacker to read arbitrary files via a base64-encoded path.