EIP-2026-106555

This is a working proof-of-concept for a Cross-Site Request Forgery (CSRF) vulnerability in dotProject 2.1.5. It demonstrates how an attacker can create a new admin user by tricking an authenticated user into submitting a malicious form.