EIP-2026-116937

This exploit demonstrates a path traversal vulnerability in CAM UnZip v5.1, allowing an attacker to write arbitrary files outside the intended extraction directory. The provided PHP script creates a malicious ZIP archive containing a file with a traversal path, which, when extracted, places a PHP file in the root directory of the system.