Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109035. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary This is a detailed technical writeup describing a directory traversal vulnerability in Kohana Framework v2.3.3. The vulnerability is located in the `master/classes/Kohana/Filebrowser.php` file, where the `str_replace` function fails to properly sanitize path inputs, allowing attackers to bypass validation and read arbitrary system files.
Description
Kohana Framework 2.3.3 - Directory Traversal
Exploits (1)
This is a detailed technical writeup describing a directory traversal vulnerability in Kohana Framework v2.3.3. The vulnerability is located in the `master/classes/Kohana/Filebrowser.php` file, where the `str_replace` function fails to properly sanitize path inputs, allowing attackers to bypass validation and read arbitrary system files.