EIP-2026-109948

The exploit demonstrates a SQL injection vulnerability via the 'search' parameter and a CSRF attack targeting the admin account settings. The CSRF PoC includes a crafted HTML form that submits malicious data to modify user details.