EIP-2026-112188

The exploit demonstrates a directory traversal vulnerability in Sitemagic CMS by manipulating the 'SMTpl' parameter to access arbitrary files (e.g., '/etc/passwd'). The null byte (%00) is used to bypass file extension checks.