EIP-2026-109025

This is a functional CSRF exploit for Kloxo-MR 6.5.0, demonstrating how an attacker can create an FTP account via a crafted HTML page without user interaction. The exploit constructs a malicious request to the target's admin interface, leveraging missing CSRF protections.