EIP-2026-113065

This is a functional CSRF exploit for Viart Shopping Cart 5.0 that uploads a shell via a crafted multipart/form-data POST request. The exploit leverages missing CSRF protection and directory traversal to place a PHP shell in the images directory.