EIP-2026-104434

This PoC demonstrates a Host Header Injection vulnerability in SISQUALWFM 7.1.319.103, where manipulating the Host header in requests to /sisqualIdentityServer/core/login redirects users to an attacker-controlled domain. The exploit shows the original and modified requests, proving the vulnerability's existence.