EIP-2026-108517

This exploit demonstrates a Local File Include (LFI) vulnerability in Joomla component Ulti RPX 2.1.0. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.