EIP-2026-110231

The exploit demonstrates CSRF for adding/editing admin accounts, SQL injection via GET parameter, and local path disclosure in Open Real Estate CMS 1.5.1. It includes functional PoC code for these vulnerabilities.