EIP-2026-105475

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in Bigware Shop 2.3.01 due to an undeclared $language parameter in PHP scripts. Attackers can traverse directories to include arbitrary files via path manipulation.