EIP-2026-107814

This exploit demonstrates a directory traversal vulnerability in ImpressPages CMS v3.6, allowing arbitrary file deletion via unsanitized input in the 'files[0][file]' POST parameter. The vulnerability is exploited by sending a crafted HTTP request to delete files outside the intended directory.