EIP-2026-107725

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Ice HRM 26.2.0, allowing arbitrary user creation or password changes via crafted HTML forms. The PoC includes functional code to trigger the vulnerability by submitting malicious requests to the target application.