EIP-2026-113236

This exploit demonstrates an authentication bypass vulnerability in Web@all CMS <= 1.1 by allowing an attacker to change admin credentials via a crafted POST request to 'mem/action.php'. The exploit leverages hidden form fields to manipulate user data without proper authentication checks.