EIP-2026-106565

This is a CSRF exploit that adds an admin user to Dream Gallery 1.0 by submitting a crafted form to the vulnerable endpoint. It does not require authentication and relies on tricking an authenticated admin into submitting the form.