EIP-2026-106607

This exploit demonstrates a Local File Disclosure (LFD) vulnerability in DynMedia Pro Web CMS 4.0 via the 'downloadfile.php' script. The 'dwnfile' parameter is vulnerable to directory traversal, allowing unauthorized access to sensitive files.