EIP-2026-112246

The exploit demonstrates a path traversal vulnerability in SmartOptimizer 1.7, allowing an attacker to disclose the source code of arbitrary files by manipulating the file path parameter. The null byte (%00) is used to bypass file extension checks.