EIP-2026-110734

This is a working PoC for a CSRF vulnerability in PHP NEWS 1.3.0, allowing an attacker to change the admin password by tricking an authenticated admin into visiting a crafted HTML page. The exploit submits a form to modify admin credentials without requiring a CSRF token.