EIP-2026-107686

This exploit demonstrates multiple CSRF vulnerabilities in Hycus CMS 1.0.1, allowing unauthorized actions such as changing admin passwords, creating admin users, deleting users, and deleting files. The PoC uses HTML forms and image tags to trigger malicious requests without user interaction.