URI injection 1 Arbitrary File Read – image Parameter Leading to file:// Injection | Suited May 26, 2026