EIP-2026-109210

This exploit demonstrates an unauthenticated PHP source code disclosure vulnerability via the `php://filter` wrapper, allowing attackers to read sensitive files within and outside the web root. The PoC includes HTTP requests to retrieve base64-encoded content of files like `admin/db_connect` and arbitrary files via path traversal.