EIP-2026-108434

This exploit demonstrates an arbitrary file download vulnerability in Joomla Mac Gallery <= 1.5 by manipulating the 'albumid' parameter to traverse directories and download files. The script sends a crafted HTTP request to the target URL and checks if the response contains the requested file content.