EIP-2026-109162

The exploit demonstrates a remote command execution vulnerability in LinPHA Photo Gallery version 1.3.2. The vulnerability is due to improper input validation in the 'rotate.php' script, allowing arbitrary command execution via the 'full_convert_path' parameter.