EIP-2026-119149

This exploit demonstrates a directory traversal vulnerability in SmallFTPD v1.0.3, allowing an attacker to read arbitrary files outside the intended directory by using relative path sequences (e.g., ../../boot.ini). The proof-of-concept shows a successful retrieval of the boot.ini file via FTP.