EIP-2026-105751

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Cart Engine 3.0.0 via the 'run' parameter in task.php. The vulnerability allows authenticated attackers to include arbitrary local files using directory traversal sequences.