EIP-2026-110593

The exploit demonstrates a local file inclusion (LFI) vulnerability and an SQL injection (SQLi) vulnerability in PhoenixCMS 1.7.0. The LFI allows directory traversal to access arbitrary files, while the SQLi enables database manipulation through crafted input.