EIP-2026-108987

This PHP script exploits an information disclosure vulnerability in Kemana Directory 1.5.6 by brute-forcing predictable database backup filenames in the '/admin/backup' directory. It checks for both .sql and .gz backup files and outputs the full URL if found.