EIP-2026-114403

This exploit leverages an improper access control vulnerability in X7 Chat 1.3.6b's install.php script, allowing an attacker to bypass installation steps and create an administrator account. The exploit involves manipulating the 'step' parameter to skip validation and directly access the admin account creation step.