EIP-2026-110368

This exploit leverages an authentication bypass vulnerability in osCommerce v2.2 by directly submitting a form to change the admin password without proper authorization checks. The provided HTML form allows an attacker to reset the admin password by sending a POST request to the vulnerable endpoint.