EIP-2026-110356

This is a functional CSRF exploit for osCommerce 2.3.3 that tricks an authenticated admin into submitting a malicious form, which writes a PHP shell to a language file. The exploit leverages improper HTTP request validation to achieve remote code execution.