EIP-2026-112734

This exploit demonstrates an HTTP Response Splitting vulnerability in Toko Lite CMS 1.5.2 via the 'charSet' parameter in 'edit.php'. The unsanitized input allows arbitrary HTTP headers to be injected into the response.