EIP-2026-111571

This writeup describes an LFI vulnerability in PTCeffect 4.6, which can be exploited to include arbitrary files and perform SQL injection via the 'view' parameter in index.php. The PoC demonstrates path traversal to include admin files and inject SQL queries to dump admin credentials.