EIP-2026-106747

This exploit demonstrates a Server-Side Request Forgery (SSRF) vulnerability in EC-CUBE 2.12.6 by sending a crafted POST request to the API test endpoint, which then fetches the attacker's IP from an external service (monip.org).