EIP-2026-105173

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Andromeda 1.9.2 by injecting malicious scripts via the 's' parameter in the URL. It also highlights a session-fixation vulnerability through cookie manipulation.