EIP-2026-106294

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Customer Support System 1.0, allowing an attacker to change the admin password by tricking an authenticated admin into submitting a crafted form. The PoC includes a functional HTML form that submits a POST request to the vulnerable endpoint with forged parameters.