EIP-2026-106038

This exploit targets CMSUno 1.6.2 by leveraging an authenticated remote code execution vulnerability in the password update functionality. It injects a reverse shell payload via the 'user' parameter after authenticating and bypassing CSRF protection.