EIP-2026-107139

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FlatPress versions 0.804-0.812.1, which can be leveraged to achieve Remote Command Execution (RCE). The exploit crafts a malicious comment with PHP shell code, exploits the LFI in the user_get() function, and establishes a remote command session.