EIP-2026-110640

This is a technical writeup describing a directory traversal vulnerability in Php AdminPanel Free version 1.0.5, allowing remote file disclosure via a crafted request to the download.php script. The vulnerability stems from improper path handling in the script, enabling attackers to access arbitrary files.