EIP-2026-110504

This is a vulnerability writeup describing a remote file inclusion (RFI) vulnerability in PayPal Store Front 3.0. The issue allows an attacker to include and execute arbitrary remote PHP scripts via the 'page' parameter in the 'do=ext' query.