EIP-2026-109414

PRE-CVE

Memorial Web Site Script - Reset Password / Insecure Cookie Handling

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109414. PoCs published by Chip d3 bi0s.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass via insecure cookie handling and a password reset vulnerability in Memorial Web Site Script. The PoC shows how to set a cookie to gain admin access and reset the password to null.

Description

Memorial Web Site Script - Reset Password / Insecure Cookie Handling

Exploits (1)

exploitdb WORKING POC VERIFIED
by Chip d3 bi0s · textwebappsphp
https://www.exploit-db.com/exploits/12358

This exploit demonstrates an authentication bypass via insecure cookie handling and a password reset vulnerability in Memorial Web Site Script. The PoC shows how to set a cookie to gain admin access and reset the password to null.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Memorial Web Site Script by Easy Scripts
No auth needed
Prerequisites: access to the target web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026