EIP-2026-105394

The exploit demonstrates a remote file inclusion vulnerability in Barcode Generator 2.0 due to improper input sanitization in the 'class_dir' parameter. An attacker can include and execute arbitrary remote PHP code by manipulating the parameter in the LSTable.php script.