EIP-2026-118135

This writeup describes a local privilege escalation vulnerability in WinSMS 3.43 due to weak folder permissions allowing any user to replace executable files or DLLs with malicious payloads. It also notes plaintext password storage in a database file.