EIP-2026-112878

The exploit demonstrates a directory traversal vulnerability in Ultimate PHP Board (UPB) via a crafted request to viewtopic.php, leading to information disclosure of directory contents and file paths. The vulnerability arises from improper handling of user-supplied input in the 'id' parameter, resulting in error messages that leak sensitive path information.