EIP-2026-113157

This exploit demonstrates a local file inclusion vulnerability in vtiger CRM by manipulating the 'module_name' parameter to traverse directories and access sensitive files like 'win.ini'. The vulnerability arises from insufficient input sanitization.