EIP-2026-107385

This exploit demonstrates a local file disclosure vulnerability in GeoMoose <= 2.9.2 by manipulating the 'id' and 'ext' parameters in the download.php script to traverse directories and access sensitive files like /etc/passwd or hosts.