EIP-2026-107801

The exploit demonstrates an arbitrary file deletion vulnerability in iManager Plugin v1.2.8 via unsanitized input in the 'd' parameter, allowing directory traversal attacks to delete files with web server permissions.