EIP-2026-100467

This exploit targets a vulnerability in Online Event Registration <= v2.0, allowing an attacker to change the password of any user by manipulating the UserID parameter in the save_profile.asp page. The PoC provides a form that submits crafted input to exploit the vulnerability.