EIP-2026-100617

The vulnerability allows an attacker to directly access the underlying Access database file (wwforum.mdb) via a predictable URL path, leading to sensitive information disclosure. This is due to improper access controls on the database file.