EIP-2026-119418

This is a technical advisory detailing a directory traversal vulnerability in SAP Crystal Report Server 2008, specifically in the qa.jsp script. The advisory includes a proof-of-concept URL demonstrating the vulnerability, which allows authenticated attackers to read arbitrary files on the server.