EIP-2026-110182

The exploit demonstrates multiple vulnerabilities in Online Shopping System Advanced 1.0, including SQL injection via `user_id` and `proId` parameters, RCE through file upload bypass, and stored XSS. Proof-of-concept requests are provided for each vulnerability, with SQLMap used to confirm SQLi.