EIP-2026-105105

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Audio & Video Library 2.7.0, allowing an attacker to add an admin user via a crafted HTML form. The form submits a POST request with predefined parameters to create a new admin account without requiring authentication.