EIP-2026-102277

The exploit demonstrates a local file include vulnerability in Photo Video Album Transfer 1.0 iOS app, allowing remote attackers to upload malicious files via the filename parameter in a POST request. The PoC includes session logs and manual steps to reproduce the vulnerability.