EIP-2026-105291

The exploit demonstrates a local file inclusion vulnerability in ATutor 2.1 by manipulating the 'tool_file' parameter to traverse directories and access sensitive files like '/etc/passwd'. The vulnerability arises from insufficient input sanitization in the 'index.php' script.