EIP-2026-100649

This Metasploit module exploits an unauthenticated arbitrary file download vulnerability in DotNetNuke DreamSlider module version 01.01.02 and below. It allows remote attackers to download arbitrary files from the server by manipulating the 'File' parameter in a GET request.