EIP-2026-113282

The exploit demonstrates a directory traversal vulnerability in Shoutbox's expanded.php script due to insufficient input sanitization. Attackers can manipulate the 'conf' parameter to access arbitrary files on the system, such as /etc/passwd.