EIP-2026-112428

The exploit demonstrates an arbitrary file reading vulnerability in StatusNet/Laconica due to insufficient input validation in the 'doc.php' action. The 'title' parameter is directly used to construct a file path, allowing directory traversal attacks to read sensitive files like 'config.php' or '/etc/passwd'.