EIP-2026-105109

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in News 1.0, allowing an attacker to add an admin user by tricking an authenticated admin into submitting a crafted form. The exploit includes a pre-filled form with hidden fields to create a new admin account with specified credentials.