EIP-2026-111921

The exploit demonstrates an arbitrary file download vulnerability in School ERP Ultimate 2018. It leverages insecure file handling in `download.php` to retrieve sensitive files like `/etc/passwd` via directory traversal.