EIP-2026-111807

This exploit demonstrates a blind command injection vulnerability in RPi Cam Control <= v6.3.14 via the `convertCmd` parameter in `preview.php`, combined with a local file read to retrieve command output. It uses a two-step process: injecting a command to write output to a file and then reading that file.