EIP-2026-108333

This exploit demonstrates a Full Path Disclosure (FPD) and Local File Disclosure/Include (LFD/LFI) vulnerability in the Joomla docman component. It leverages improper input validation in the 'file' parameter to disclose server paths and read arbitrary files, including sensitive configuration files.