EIP-2026-106425

This exploit demonstrates a Local File Include (LFI) vulnerability in DesktopOnNet 3 Beta9. The vulnerability arises from unsanitized user input in the 'don3_lang' parameter, allowing an attacker to include arbitrary local files via null byte injection.