EIP-2026-114385

The provided text describes a local file inclusion (LFI) vulnerability in OsCommerce's Wrapper.php due to improper input sanitization. It allows unauthorized file access via path traversal, but no actual exploit code is included.