EIP-2026-111009

This exploit demonstrates an information disclosure vulnerability in PHPCMS2008 due to insufficient input validation. It allows an attacker to download local files, such as configuration files, by manipulating the 'f' parameter in the URL.