Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request.