EIP-2026-109939

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Joomla component Ninja RSS Syndicator 1.0.8. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter.