EIP-2026-110439

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Pacer Edition CMS 2.1 via the 'l' parameter in admin/login/forgot/index.php. The vulnerability allows directory traversal and inclusion of arbitrary local files using URL-encoded NULL bytes.