EIP-2026-110835

This is a writeup describing a directory traversal vulnerability in PHP-Nuke's user registration form. An attacker can manipulate form elements to disclose arbitrary web-readable files by altering the 'image' field to include path traversal sequences.