EIP-2026-105395

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in barcodegen <= 2.0.0, where the `class_dir` parameter in `LSTable.php` is used unsafely in an `include()` statement, allowing remote code execution by including a malicious file.