EIP-2026-107628

This exploit demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Hospitals Patient Records Management System 1.0, allowing an attacker to takeover an Administrator's account by modifying the 'id' parameter in a POST request.