EIP-2026-111245

This exploit demonstrates an HTTP response splitting vulnerability in phpWebSite's user module. It manipulates the 'block_username' parameter to inject malicious HTTP headers and content, potentially misleading clients or facilitating further attacks.