EIP-2026-110411

This exploit demonstrates an unauthenticated directory traversal vulnerability in OV3 Online Administration 3.0, allowing arbitrary file access via the 'file' parameter in 'download.php'. The PoC includes a sample HTTP request to read '/etc/passwd' and references potential LFI-to-RCE techniques.