EIP-2026-107098

This exploit demonstrates SQL injection and arbitrary file download vulnerabilities in fims - File Management System <= 1.2.1a. The SQLi occurs due to unsanitized user input in the login function, while the file download vulnerability arises from improper validation of file IDs.