EIP-2026-109247

The exploit demonstrates a remote file inclusion vulnerability in MagicScripts E-Store Kit-2 PayPal Edition. By manipulating the 'main' and 'menu' parameters in the URL, an attacker can include and execute arbitrary remote PHP scripts in the context of the web server.