EIP-2026-108916

The document describes multiple vulnerabilities in the NoNumber Framework Joomla! Plugin, including Local File Inclusion (LFI) and Open Proxy/Open cURL/Shell Upload flaws. It provides technical details on how to exploit these vulnerabilities, such as manipulating the 'nn_qp' parameter and using cURL options to inject malicious code.