EIP-2026-109332

This exploit demonstrates an authentication bypass vulnerability in Mars Stealer versions prior to 8.3. It sends a crafted POST request to '/includes/settingsactions.php' to change the admin password without authentication.