EIP-2026-107918

This exploit demonstrates a CSRF token hijacking vulnerability in IP Board 3.x by leveraging improper input sanitization in the sharelink function. The attacker crafts a malicious URL to redirect the victim to an attacker-controlled domain, capturing the CSRF token via a GET parameter and using it to perform unauthorized actions.