EIP-2026-108275

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_bca-rss-syndicator. The PoC shows how an attacker can traverse directories and include arbitrary files (e.g., /etc/passwd) by manipulating the 'controller' parameter.