Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.