EIP-2026-108602

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Joomla's com_xgallery component version 1.0. The exploit leverages a null byte injection in the 'file' parameter to include arbitrary local files.