EIP-2026-106458

This exploit demonstrates a CSRF vulnerability in DirectAdmin 1.491, allowing an attacker to create a new admin account via a crafted HTML form. The PoC uses JavaScript to submit a malicious request to the target endpoint without user interaction.