EIP-2026-112544

The exploit demonstrates a local file inclusion (LFI) vulnerability in TA.CMS by manipulating the 'lang' parameter to traverse directories and access arbitrary files (e.g., /etc/passwd). The 'p_id' parameter is also mentioned as a potential SQL injection vector, though no explicit SQLi payload is provided.