EIP-2026-100507

This ASP script exploits an authentication bypass in Q-Shop ASP shopping cart software to read sensitive files (admin credentials and database configuration) by directly accessing the file upload interface without authentication. It uses ActiveXObject to perform server-side file reading and dumps the contents to the web.