EIP-2026-106148

This exploit demonstrates a local file inclusion vulnerability and arbitrary file upload/delete vulnerabilities in ContentNow 1.30. The LFI allows reading sensitive files via path traversal, while the upload functionality can be abused for remote command execution due to improper permissions.