EIP-2026-107785

This is a writeup describing a Local File Inclusion (LFI) vulnerability in iLister listing script. The vulnerability allows an attacker to include arbitrary files via the 'action' parameter in the search_results page.