EIP-2026-110626

This exploit bypasses authentication via a crafted cookie and injects PHP code into a template file to achieve remote command execution in PhotoStand 1.2.0.