EIP-2026-110909

The exploit demonstrates a directory traversal vulnerability in PHP168 Template Editor by manipulating the 'filename' parameter to read arbitrary files. The provided URL example shows how to access the MySQL configuration file, confirming the vulnerability.