EIP-2026-110383

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in osCommerce 3.0a5 by injecting a remote shell via the 'module' parameter in the 'actions.php' file. The exploit is straightforward and relies on the target server's misconfiguration to execute arbitrary code.