EIP-2026-108725

This exploit demonstrates an arbitrary file download vulnerability in Joomla! Component JiFile 2.3.1 by sending a crafted HTTP GET request to download sensitive files like 'index.php'. The vulnerability arises from improper input validation in the 'filename' parameter.