EIP-2026-108906

This exploit demonstrates a directory traversal vulnerability in Joomla! com_fabrik 3.9.11, allowing unauthorized access to files outside the intended directory via the 'folder' parameter in the 'onAjax_files' function.