EIP-2026-110243

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Open-Realty 2.5.7, allowing arbitrary file inclusion via the 'select_users_lang' parameter. It also describes a method to achieve Remote Code Execution (RCE) by uploading a malicious image containing PHP code.