EIP-2026-106277

This exploit demonstrates a file inclusion vulnerability in Cuppa CMS Beta, allowing an attacker to include local or remote PHP files or read non-PHP files via the 'urlConfig' parameter in 'alertConfigField.php'. It includes examples for remote file inclusion, local file inclusion, and reading sensitive files using PHP streams.