EIP-2026-100607

This exploit demonstrates an information leakage vulnerability in VP-ASP Shopping Cart 7.0, allowing unauthorized download of the database file (shopping700.mdb) which contains user credentials in the 'tbluser' table. The attack is trivial, requiring only a direct HTTP request to the exposed database path.