EIP-2026-100860

This advisory describes an arbitrary file reading vulnerability in mnoGoSearch 3.3.12 and earlier, where the 'd' parameter can be manipulated to include arbitrary files via template injection. The exploit leverages the QUERY_STRING and PATH_INFO to read sensitive files like /etc/passwd.