EIP-2026-105067

The exploit demonstrates a remote file inclusion vulnerability in Album Photo Sans Nom 1.6 by manipulating the 'img' parameter in getimg.php to include arbitrary remote files. This can lead to remote code execution if the attacker controls the included file.