EIP-2026-114573

This exploit demonstrates a directory traversal vulnerability in ZaoCMS, allowing unauthorized file disclosure by manipulating the 'Directory' parameter to access sensitive files like '/etc/passwd'. The attack leverages improper input validation in the 'download.php' script.