EIP-2026-108351

This exploit demonstrates Local File Include (LFI) and SQL Injection (SQLi) vulnerabilities in RSform! 1.0.5 for Joomla. The LFI allows reading arbitrary files via path traversal, while the SQLi leverages a time-based benchmark function for exploitation.