EIP-2026-110239

This exploit demonstrates a CSRF vulnerability in Open Upload 0.4.2, allowing an attacker to add a new admin user or elevate a normal user's privileges to admin by tricking an authenticated admin into submitting a crafted form.