EIP-2026-106370

This exploit demonstrates an insecure cookie handling vulnerability in dB Masters Multimedia Links Directory 3.1.3, allowing an attacker to bypass authentication by manipulating the 'admin_log' cookie via JavaScript. The PoC shows how to set arbitrary cookie values to gain admin access without valid credentials.