EIP-2026-109132

This exploit targets LightNEasy sql/no-db <= 2.2.x by leveraging a local file inclusion vulnerability to disclose the configuration file. It sends an HTTP request with a crafted path to retrieve sensitive information such as passwords, usernames, and email addresses.