EIP-2026-107301

This is a security advisory detailing a Local File Inclusion (LFI) vulnerability in FUDforum 3.0.6. The vulnerability allows an attacker with admin credentials to read arbitrary files via directory traversal in the 'file' parameter of the hlplist.php script.