EIP-2026-110003

This exploit targets a vulnerability in Nwahy Dir v2.1, specifically in the admincp/admininfo.php file, allowing an attacker to change the admin password by manipulating the username cookie and sending a crafted POST request. The exploit bypasses authentication by leveraging improper session handling.