EIP-2026-107576

This is a functional CSRF (Cross-Site Request Forgery) exploit for Help Request System 1.1g, allowing an attacker to add an admin user by tricking an authenticated user into submitting a crafted form. The exploit leverages a lack of CSRF protection in the user addition endpoint.