EIP-2026-106305

This PHP script exploits a regex injection vulnerability in Cutenews <= 1.4.5 to fetch the admin password's MD5 hash via cookie manipulation. It uses a binary search algorithm to efficiently determine each character of the hash.