EIP-2026-110372

This exploit demonstrates a remote file upload vulnerability in osCommerce 2.3.1's Banner Manager. It allows an attacker to upload a malicious file (e.g., a PHP shell) by submitting a form to the vulnerable endpoint, bypassing authentication.