EIP-2026-112609

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in Text Exchange Pro's index.php by manipulating the 'page' parameter to traverse directories and read arbitrary files (e.g., /etc/passwd). The null byte (%00) is used to bypass file extension restrictions.