EIP-2026-112027

The exploit demonstrates two vulnerabilities in Shopmaker CMS 2.0: Local File Inclusion (LFI) via the 'mod' parameter and Blind SQL Injection (SQLi) via the 'page_id' parameter. Both vulnerabilities are confirmed with functional proof-of-concept URLs.