EIP-2026-104453

The writeup describes a post-authentication local file include/edit vulnerability in SQL-Ledger <= 2.8.33, allowing users to read and modify arbitrary files accessible to the web server. The vulnerability is due to insufficient validation of the 'file' parameter in the stylesheet editing functionality.