EIP-2026-113245

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in WebBiblio 3.0 by manipulating the 'page' parameter in help.php to traverse directories and read arbitrary files (e.g., /etc/passwd). The null byte (%00) is used to terminate the file path, bypassing any appended extensions.