EIP-2026-108612

This exploit demonstrates a local file inclusion (LFI) vulnerability in the ZT Autolinks Component for Joomla! by manipulating the 'controller' parameter to traverse directories and include arbitrary files, such as '/etc/passwd'.