EIP-2026-107669

The exploit demonstrates a reflected XSS vulnerability in htmltonuke.php by injecting arbitrary JavaScript via the 'filnavn' parameter. The payload is executed in the context of the vulnerable site when a user visits the crafted URL.