EIP-2026-106211

This exploit demonstrates a CSRF vulnerability in cPanel 11.25 that allows an attacker to add an FTP account via a malicious HTML form. The form submits a POST request to the target endpoint with predefined credentials and settings.