EIP-2026-107554

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in HaPe PKH 1.1, allowing an attacker to change the administrator password via a crafted POST request. The PoC includes both raw HTTP request and HTML form examples.