EIP-2026-100171

The exploit demonstrates a directory traversal and information disclosure vulnerability in BlogEngine.NET 1.6 via crafted SOAP requests. It allows arbitrary file reads and potential file uploads by manipulating the 'source' and 'destination' parameters.