EIP-2026-105009

The provided text describes a remote file inclusion (RFI) vulnerability in AFCommerce, where insufficient input sanitization in the 'rootpathtocart' parameter allows arbitrary file inclusion. The example URL demonstrates the vulnerability but does not include functional exploit code.