EIP-2026-113164

The exploit demonstrates a directory traversal vulnerability in W-Agora by crafting a URL with dot-dot-slash sequences to access files outside the web root, such as /etc/passwd. The vulnerability arises from insufficient input sanitization in the 'file' parameter.