EIP-2026-109856

The provided code demonstrates a Local File Inclusion (LFI) vulnerability in NeoBill 0.9-alpha by exploiting insufficient input sanitization. It uses cURL to send crafted POST data and cookies with a null-byte terminated payload to trigger the LFI.