EIP-2026-107573

The exploit demonstrates a local file inclusion vulnerability in HeffnerCMS 1.22 due to improper input sanitization. By appending a null byte (%00) to the 'page' parameter, an attacker can include arbitrary local files, potentially leading to sensitive information disclosure or remote code execution.