EIP-2026-109436
PRE-CVEMevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109436. PoCs published by Crazy_Hacker.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Mevin Basic PHP Events Lister v2.03, allowing an attacker to add or delete admin users via crafted HTML forms. The PoC includes two forms: one for adding an admin with predefined credentials and another for deleting an admin by ID.
Description
Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery
Exploits (1)
This exploit demonstrates a CSRF vulnerability in Mevin Basic PHP Events Lister v2.03, allowing an attacker to add or delete admin users via crafted HTML forms. The PoC includes two forms: one for adding an admin with predefined credentials and another for deleting an admin by ID.