I mis spoke the challenge I'm working on is 10.194.0.4 now..
Opencart - lots of vulns listed but all require admin access.. found the admin login, and am trying to brute Force it but no avail. Also was able to upload a photo file disguised as a gift but can't find how to access it . I have beat my head on all these challenges now, and am. Not getting very far.