EIP-2026-107840

This is a detailed technical writeup describing a local file disclosure vulnerability in InfraPower PPS-02-S Q213V1. The vulnerability arises from improper input validation in the 'ListFile.php' script, allowing arbitrary file reads via directory traversal.