EIP-2026-112519

The exploit demonstrates a local file inclusion (LFI) vulnerability in SyCtel Design by manipulating the 'menu' parameter to access sensitive files like '/proc/self/environ' and '/etc/passwd'. The lack of input sanitization allows arbitrary file reads, potentially leading to information disclosure or remote code execution if combined with log poisoning.