EIP-2026-108522

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_rwcards. It allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.