EIP-2026-104807

This exploit demonstrates a CRLF injection vulnerability in 11in1 CMS v1.0.1 via the 'content' parameter in 'do.php', allowing arbitrary HTTP headers to be injected into the response. The PoC shows how an attacker can manipulate the 'Location' header and insert custom headers.