EIP-2026-101820

This exploit demonstrates an authenticated file path traversal vulnerability in KevinLAB BEMS 1.0, allowing arbitrary file disclosure via the 'page' GET parameter in index.php. The PoC includes a sample request to disclose /etc/passwd.