EIP-2026-112877

This exploit demonstrates an authentication bypass vulnerability in Ultimate Media Script 2.0 by allowing remote password changes, admin addition, and admin deletion via crafted HTTP requests. The PoC includes HTML forms that submit directly to the vulnerable admin endpoint without proper authentication checks.