EIP-2026-111254

The exploit demonstrates a directory traversal vulnerability in phpXplorer 0.9.33, allowing attackers to read arbitrary files by manipulating the 'sAction' parameter with traversal sequences. The null byte (%00) is used to terminate the string and bypass sanitization.