EIP-2026-108468

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_otzivi. The attacker can manipulate the 'controller' parameter to include arbitrary files, such as /etc/passwd, by using directory traversal sequences.