EIP-2026-112742

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in TomatoCart 1.1. The vulnerability arises from improper input validation in the 'pdf' parameter, allowing an attacker to traverse directories and include arbitrary files.