EIP-2026-106157

This exploit demonstrates a directory traversal vulnerability in Coppermine Gallery's 'save_thumb' function, allowing an authenticated user to read arbitrary files by manipulating the 'new_image' parameter in a POST request to pic_editor.php. The vulnerability affects versions 1.4.14 to 1.5.44.