EIP-2026-105611

This exploit demonstrates a CSRF vulnerability in Boutique SudBox 1.2, allowing an attacker to change the admin login and password via a crafted HTML form. The PoC is a simple form submission that targets the password change endpoint without requiring prior authentication.