EIP-2026-108650

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_flashgames version 1.5.0. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.