EIP-2026-107072

This is a functional CSRF (Cross-Site Request Forgery) exploit for Feng Office 1.7.3.3, demonstrating how an attacker can forge a request to modify user profile details, including elevating privileges to 'admin'. The PoC includes a crafted HTML form with JavaScript auto-submission to trigger the vulnerability.