EIP-2026-113733

The exploit demonstrates two vulnerabilities in EZ SQL Reports < 4.11.37: arbitrary file download via path traversal and arbitrary code execution via command injection in database connection parameters. Both require admin/collaborator access.