EIP-2026-107429

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Glossword CMS versions up to 1.8.11. The PoC uses a path traversal attack to read arbitrary files (e.g., /etc/passwd) via a null byte injection in the 't' parameter.