EIP-2026-101765

This exploit describes an authentication bypass vulnerability in HBGK DVR V3.0.0 build20161206. By manipulating the 'userInfo' cookie with a base64-encoded 'admin:anyword' value, an attacker can bypass authentication and access the main page.