EIP-2026-106673

The exploit demonstrates a directory traversal vulnerability in the Image Gallery Plugin for e107, allowing an attacker to read arbitrary local files by manipulating the 'name' parameter in the URL. The provided example shows how to access the 'e107_config.php' file, which may contain sensitive configuration details.