EIP-2026-107906

This exploit targets Invision Gallery 2.0.7, leveraging a ReadFile() vulnerability for arbitrary file disclosure and an SQL injection flaw to extract sensitive data from the database. It constructs HTTP requests to exploit these vulnerabilities and parses the responses to display the results.