EIP-2026-108812

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component obSuggest. It leverages a null byte injection in the 'controller' parameter to bypass file extension checks and include arbitrary local files.