EIP-2026-109024

This is a functional CSRF exploit for Kloxo 6.1.18 that demonstrates the ability to create an FTP user via a crafted HTML page. The exploit leverages the lack of CSRF protection in Kloxo's form submissions to perform unauthorized actions.