EIP-2026-111845

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Ruubikcms v1.1.0 via the `/extra/image.php` script, which allows arbitrary file reading by manipulating the `f` parameter. The PoC includes example URLs to exploit the vulnerability.