EIP-2026-105563

This exploit demonstrates a CSRF vulnerability in Bluethrust Clan Scripts v4 R17 that allows an attacker to elevate a user's privileges to Commander/Admin. It also details a PHP shell upload vulnerability via the theme modification feature, which bypasses an admin key check.