EIP-2026-114463

This is a writeup describing a local file inclusion (LFI) vulnerability in XOOPS 2.5.0. The vulnerability allows an attacker to read arbitrary local files by manipulating the 'target' parameter in the imagemanager.php script.