EIP-2026-100716

This exploit leverages a world-writable configuration file in Excite for Web Servers 1.1 to bypass authentication by directly submitting an encrypted password to the AT-generate.cgi script. The attacker can either read the existing encrypted password or overwrite it with a custom one.