EIP-2026-109220

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in LoveCMS 1.6.2 Final, where the 'install' and 'uninstall' parameters in '/system/admin/modules.php' are not properly sanitized, allowing path traversal to include arbitrary files.