EIP-2026-112739

This exploit demonstrates an arbitrary file write vulnerability in TomatoCart via the `file_manager` module, allowing an attacker to create a malicious PHP file with shell command execution. The vulnerability is exploited through a crafted POST request to `/admin/json.php` with a malicious payload in the `content` parameter.