EIP-2026-114518

This exploit demonstrates a local file inclusion vulnerability in Yellow Duck Weblog 2.1.0-final. The vulnerability arises from unsanitized user input in the 'lang' parameter, allowing an attacker to include arbitrary local files via null byte injection.