EIP-2026-108986

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Kemana Directory 1.5.6 via the 'run' parameter in task.php. The vulnerability allows authenticated attackers to include local files using directory traversal sequences.