EIP-2026-100093
PRE-CVEActive Bulletin Board 1.1b2 - Remote User Pass Change
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100093. PoCs published by ajann.
AI-analyzed exploit summary This exploit targets Active Bulletin Board v1.1 beta2 by submitting a crafted POST request to doprofiledit.asp, allowing an attacker to change the password of any user by manipulating hidden form fields (Id and Nom). The exploit leverages insufficient authentication checks to modify user credentials.
Description
Active Bulletin Board 1.1b2 - Remote User Pass Change
Exploits (1)
This exploit targets Active Bulletin Board v1.1 beta2 by submitting a crafted POST request to doprofiledit.asp, allowing an attacker to change the password of any user by manipulating hidden form fields (Id and Nom). The exploit leverages insufficient authentication checks to modify user credentials.