EIP-2026-113952

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the WordPress Plugin Photocart Link. The vulnerability exists in the decode.php file, which allows an attacker to read arbitrary files on the server by manipulating the base64-encoded 'id' parameter.