EIP-2026-104494

The provided code is a functional CSRF exploit for Wolters Kluwer TeamMate+ (CVE-2019-10253), demonstrating how an attacker can upload malicious files by enticing an authenticated user to visit a crafted HTML page. The exploit targets the 'DomainObjectDocumentUpload.ashx' endpoint, which lacks CSRF token validation.