EIP-2026-114426

This exploit demonstrates an arbitrary file disclosure vulnerability in Xerox DC260 EFI Fiery Controller Webtools 2.0. The 'forceSave.php' script does not properly sanitize the 'file' GET parameter, allowing unauthenticated attackers to read arbitrary files on the system.