EIP-2026-106167

This exploit demonstrates multiple vulnerabilities in Coppermine Photo Gallery <= 1.4.22, including Local File Inclusion (LFI) and Blind SQL Injection (SQLi) via register_globals bypass, and a separate SQLi in album password handling. The PoC provides clear examples of exploiting these flaws under specific PHP configurations.