EIP-2026-108947

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in JV2 Folder Gallery 3.1.1 via the 'language' and 'gallerytheme' parameters in popup_slideshow.php. The PoC shows how an attacker can include arbitrary files or inject a shell by manipulating these parameters.