EIP-2026-118258

The exploit targets a directory traversal vulnerability in AN HTTPd's count.pl script, allowing an attacker to overwrite arbitrary files by supplying a crafted path with '../' sequences. The provided URL demonstrates the vulnerability by attempting to overwrite explorer.exe in the winnt directory.