EIP-2026-111433

The exploit describes a directory traversal vulnerability in the PostNuke Blocks module, allowing attackers to disclose arbitrary files by manipulating the 'func' parameter with traversal sequences. The example URL demonstrates accessing '/etc/passwd' via a NULL byte-terminated path.