EIP-2026-106783

The provided text describes a directory traversal vulnerability in eFront 3.6.10, where insufficient input sanitization allows attackers to access sensitive files via a crafted URL parameter. The exploit leverages the 'download' parameter in the 'student.php' endpoint to traverse directories and retrieve arbitrary files.