EIP-2026-106806

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in eGroupware 1.8.001.20110421 via a crafted URL parameter, allowing arbitrary file inclusion. It also includes a secondary Open Redirect vulnerability via a maliciously crafted forward parameter.