EIP-2026-111284

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in pithcms version 0.9.5.1 due to improper handling of the 'theme' parameter. The PoC shows how an attacker can include arbitrary local files or potentially execute remote code by manipulating the parameter.