EIP-2026-112922

This document describes two vulnerabilities in the User Login and Management PHP Script: an authentication bypass allowing unauthenticated access to the admin dashboard and a CSRF vulnerability enabling account takeover via password change.