EIP-2026-110414

The exploit demonstrates multiple local file inclusion (LFI) vulnerabilities in OvBB v0.16a due to improper handling of the CFG[skin] parameter in various template files. The PoC shows how an attacker can traverse directories to read arbitrary files (e.g., /etc/passwd) by manipulating the parameter.