EIP-2026-113438

This exploit demonstrates two vulnerabilities in Wili-CMS 0.4.0: a remote/local file inclusion flaw allowing command execution via crafted HTTP requests, and an authentication bypass using SQL injection. The PoC includes functional exploit code for both issues.