EIP-2026-100372

This is a writeup describing an information disclosure vulnerability in IISWorks FileMan, where an unencrypted Microsoft Access database file is directly downloadable due to improper IIS permissions. The vulnerability allows remote attackers to access sensitive user and permission data.