EIP-2026-106478

This exploit demonstrates a remote file disclosure vulnerability in DM FileManager 3.9.4 by manipulating the 'file' and 'currdir' parameters to access arbitrary files such as 'config.php'.