EIP-2026-109490

This document describes a full path disclosure vulnerability in Miniweb 2.0, where an invalid module parameter triggers a PHP warning revealing the server's file path. The analysis includes technical details, sample exploit code, and a proposed fix.