EIP-2026-106989

This exploit demonstrates an HTML injection vulnerability in eyeOS, where attacker-supplied HTML and script code can execute in the context of the affected site. The PoC includes a script that exfiltrates user cookies and a PHP backdoor for command execution.