EIP-2026-109387

This exploit targets a file disclosure vulnerability in MediaSuite CMS by manipulating the 'force-download.php' script to read arbitrary files, specifically 'site-settings.php', which contains database credentials. The exploit constructs a malicious URL to bypass directory restrictions and download sensitive files.