EIP-2026-107729
PRE-CVEICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107729. PoCs published by Devansh Bordia.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in ICEHRM 31.0.0.OS, allowing an attacker to delete arbitrary user accounts by tricking a victim into submitting a crafted HTML form. The PoC includes a functional HTML form that sends a POST request to delete a user without requiring a CSRF token.
Description
ICEHRM 31.0.0.0S - Cross-site Request Forgery (CSRF) to Account Deletion
Exploits (1)
This exploit demonstrates a CSRF vulnerability in ICEHRM 31.0.0.OS, allowing an attacker to delete arbitrary user accounts by tricking a victim into submitting a crafted HTML form. The PoC includes a functional HTML form that sends a POST request to delete a user without requiring a CSRF token.