EIP-2026-107934

This is a writeup describing a Full Path Disclosure vulnerability in Invision Power Board 3.x.x via the search_app parameter in search.php. It also mentions potential for Blind SQLi but provides no exploit code.