EIP-2026-104857

This is a CSRF exploit for 60 cycleCMS V 2.5.2 that allows an attacker to change the username and password of a user by tricking them into submitting a malicious form. The exploit leverages a lack of CSRF protection in the changeUserPass.php endpoint.