EIP-2026-118907

The provided text describes a directory traversal vulnerability in WebForums and File-Sharing for NET, where insufficient sanitization of user-supplied input allows attackers to access sensitive files outside the server root directory using '/../' sequences. The example demonstrates accessing 'user.ini' via a crafted URL.