EIP-2026-111019

This exploit demonstrates an information disclosure vulnerability in phpCollab 2.5 by sending a crafted POST request to 'tbl_dump.php' to download backup files containing sensitive data. The attack leverages insufficient input validation to exfiltrate database tables.