EIP-2026-108518

This exploit demonstrates a directory traversal vulnerability in Appointment Booking Pro for Joomla, allowing unauthorized access to sensitive files like /etc/passwd via a crafted URL. The PoC is straightforward and leverages a null byte injection to bypass path restrictions.