EIP-2026-112831

This exploit demonstrates a directory traversal vulnerability in TYPO3's download.php script, allowing unauthorized file disclosure by manipulating the 'Fichier_a_telecharger' parameter. The PoC includes example URLs to retrieve sensitive files like /etc/passwd and localconf.php.