EIP-2026-112636

This exploit demonstrates an arbitrary file download vulnerability in The Open ISES Project 3.30A via path traversal in the 'filename' parameter of the download.php script. It allows unauthorized access to sensitive files like config.php or system files (e.g., win.ini).