EIP-2026-112732

The exploit demonstrates a directory traversal vulnerability in toendaCMS by manipulating the 'album' and 'key' parameters in the media.php file to access sensitive files like /etc/passwd. The vulnerability arises from insufficient input sanitization, allowing attackers to traverse directories and read arbitrary files.