EIP-2026-106240

This exploit demonstrates CSRF vulnerabilities in Croogo 1.2.1, allowing an attacker to add a new admin user or change an existing admin's password via crafted HTML forms. The PoC includes two distinct forms targeting user addition and password reset endpoints.