EIP-2026-106069

The exploit demonstrates a remote file inclusion vulnerability in Comdev eCommerce by manipulating the 'path[docroot]' parameter to include and execute arbitrary server-side script code. The vulnerability arises from insufficient input sanitization, allowing an attacker to specify a remote URL containing malicious code.