EIP-2026-110384

This exploit demonstrates a remote file upload vulnerability in Oscommerce Online Merchant v2.2 via the `/admin/file_manager.php` endpoint. It provides HTML forms to upload arbitrary files and create new files with custom content, enabling remote code execution (RCE) if a shell is uploaded.