EIP-2026-102272

This advisory details a local file include vulnerability in Photo Manager Pro v4.4.0 iOS, where the `filename` parameter in the `upload.action` module allows unauthorized file inclusion. The PoC demonstrates how an attacker can exploit this via POST requests to the vulnerable endpoint.