EIP-2026-100512

The document describes two vulnerabilities in RaakCms: an arbitrary file upload vulnerability allowing ASPX file uploads and a directory traversal vulnerability via the 'dir' parameter in browse.asp and browseFile.asp. It provides technical details on exploitation paths but lacks actual exploit code.