EIP-2026-109634

This is a writeup describing a Local File Inclusion (LFI) vulnerability in MultiCMS. It provides example URLs to exploit the vulnerability by manipulating the 'lng' parameter in the index.php file to read arbitrary files like /etc/passwd.