EIP-2026-110816

This exploit demonstrates a directory traversal vulnerability in avatar_studio.php, allowing unauthorized access to files outside the intended directory and potential arbitrary file upload by manipulating the 'avatar_studio' and 'avatar_select' parameters.