EIP-2026-118335

This PHP script exploits a path traversal vulnerability in Buffy FTP Server v1.3, allowing unauthorized file read, delete, and directory removal via crafted RETR, DELE, and RMD commands. It interacts with the FTP server using socket operations and supports passive mode for file retrieval.