EIP-2026-106219

This exploit demonstrates a CSRF vulnerability in cPanel versions below 11.25, allowing an attacker to upload a PHP script by tricking a user into submitting a malicious form. The PoC bypasses security checks if tokens and referrer validation are disabled.