EIP-2026-105879

This exploit demonstrates an authentication bypass vulnerability in ClanWeb 1.4.2, allowing an attacker to change the admin password and add a new admin user by directly submitting a crafted POST request to the save.php endpoint.