EIP-2026-109816

This HTML-based PoC exploits a local file inclusion vulnerability in N'CMS Equipe by allowing an attacker to inject arbitrary file paths via the 'page' or 'tData[name]' parameters. The exploit demonstrates how to traverse directories and include sensitive files like 'boot.ini'.