EIP-2026-109219

This exploit demonstrates a CSRF vulnerability in LoveCMS 1.6.2 that allows arbitrary PHP code execution via the 'console.php' endpoint. The PoC crafts a malicious form submission that writes a PHP shell to the target system.