EIP-2026-114474

The provided text describes a directory traversal vulnerability in the Xoops Incontent module version 3.0, where unsanitized user input allows access to files outside the server root directory via traversal sequences like '../'.