Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114596. PoCs published by Salvatore Fresta.
AI-analyzed exploit summary This is a technical writeup detailing a Local File Inclusion (LFI) vulnerability in Zen Cart 1.3.9h. The vulnerability arises due to improper sanitization of the 'loader_file' parameter in 'includes/initsystem.php', allowing directory traversal attacks when 'register_globals' is enabled.
Description
Zen Cart 1.3.9h - Local File Inclusion
Exploits (1)
This is a technical writeup detailing a Local File Inclusion (LFI) vulnerability in Zen Cart 1.3.9h. The vulnerability arises due to improper sanitization of the 'loader_file' parameter in 'includes/initsystem.php', allowing directory traversal attacks when 'register_globals' is enabled.