EIP-2026-112479

This exploit targets a local file disclosure vulnerability in Sulata iSoft's stream.php by manipulating the 'path' parameter to access sensitive files like connection.php. The PoC demonstrates directory traversal to leak configuration files.