EIP-2026-108490

This exploit leverages a Local File Inclusion (LFI) vulnerability in the Joomla component 'com_portfolio' via the 'phpThumb.php' script. By manipulating the 'src' parameter, an attacker can disclose arbitrary files on the server, such as '/etc/passwd'.