EIP-2026-103927

The exploit demonstrates a cross-site scripting (XSS) vulnerability in HP System Management Homepage by injecting a malicious script via the 'servercert' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing authentication credentials.