EIP-2026-106354

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in DasForum 0.0.1 due to improper input validation in the 'layout' parameter of bbcode_inputs.php. The PoC shows how an attacker can include arbitrary local files by appending a null byte (%00) to bypass file extension checks.