EIP-2026-119341

This exploit demonstrates a CSRF vulnerability in AMS WebMail on Windows Server 2003, allowing an attacker to reset a user's password via a crafted email containing malicious JavaScript. The PoC includes steps to configure the environment, host the exploit files, and execute the attack to bypass authentication.