EIP-2026-103287

This exploit demonstrates a directory traversal vulnerability in ISPworker <= 1.23, allowing remote file disclosure via crafted requests to the download.php script. The PoC shows how to read arbitrary files (e.g., /etc/passwd) by manipulating the ticketid or filename parameters.