EIP-2026-107007

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Ezboard's 'invitefriends.php3' script by injecting malicious HTML and JavaScript via the 'yourName' parameter. The payload creates a fake login form to phish user credentials.