EIP-2026-108985

This exploit demonstrates a CAPTCHA bypass vulnerability in Kemana Directory 1.5.6 by poisoning the 'qvc_value' cookie with a SHA1 hash. It uses Perl to automate the process of sending requests, extracting the cookie, and replacing it with a crafted value to bypass authentication.