EIP-2026-108477

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_pcchess. The PoC shows how an attacker can traverse directories and include arbitrary files (e.g., /etc/passwd) by manipulating the 'controller' parameter with a null byte (%00) to bypass file extension checks.