EIP-2026-113052

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in velhost uploader script v1.2. The vulnerability arises from unsanitized user input in the 'language' parameter, allowing an attacker to read arbitrary files on the server via directory traversal.