EIP-2026-119381

This exploit demonstrates a local file inclusion (LFI) vulnerability in InterPhoto Image Gallery 2.4.2 by manipulating the 'IPLANGV6O1or24t6cI' cookie to traverse directories and include arbitrary files (e.g., 'windows/win.ini'). The PoC sends a crafted HTTP POST request to trigger the vulnerability.