EIP-2026-100643

This exploit demonstrates a directory traversal vulnerability in BlogEngine.NET by sending a crafted GET request to the /api/filemanager endpoint with a path parameter containing ../ sequences. It includes functionality to authenticate, traverse directories, and output file paths to a specified file.