EIP-2026-108287

The exploit describes a local file inclusion vulnerability in the 'com_boss' component for Joomla! due to improper input sanitization. An attacker can leverage this to read sensitive files like '/etc/passwd' by manipulating the 'controller' parameter.