EIP-2026-109082

This exploit demonstrates a local file disclosure vulnerability in Lc Flickr Carousel V1.0 via path traversal in the 'file' parameter of getImage.php. It allows unauthorized access to sensitive files like /etc/passwd.