EIP-2026-100794

This exploit demonstrates a cookie theft vulnerability in the eRoom plug-in by using a malicious HTML page to send a user's cookies to a remote CGI script. The CGI script logs the stolen cookies, including session IDs, which could be used for session hijacking.