EIP-2026-110743

This is a functional CSRF exploit for PHP Product Catalog that changes the administrator password by tricking an authenticated admin into submitting a crafted form. The exploit leverages a lack of CSRF protection in the admin panel.