EIP-2026-108591

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component Webee Comments version 2.0. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.