EIP-2026-105935

This exploit demonstrates a directory traversal vulnerability in ClipBucket 2.5 via a crafted POST request to 'file_results.php'. The 'file_name' parameter is manipulated to traverse directories and access '/etc/passwd' by appending a null byte (%00) to bypass file extension checks.