EIP-2026-111460

This exploit demonstrates a directory traversal vulnerability in PRADO PHP Framework 3.2.0, allowing arbitrary file reads via the 'sr' parameter in 'functional_tests.php'. The lack of proper sanitization enables attackers to access local files outside the intended directory.