EIP-2026-108326

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_dcnews. The PoC shows how an attacker can manipulate the 'controller' parameter to include arbitrary files, such as '/etc/passwd', by traversing directories.