EIP-2026-112175

The provided text describes an arbitrary file download vulnerability in Sisfo Kampus 2006 due to insufficient input sanitization. An attacker can exploit this to download sensitive files like 'connectdb.php' by manipulating the 'f' parameter in 'dwoprn.php'.