EIP-2026-111048

This is a functional CSRF exploit for PHPfileNavigator v2.3.3 that adds arbitrary admin accounts by submitting a crafted POST request without requiring a valid CSRF token. The exploit leverages the absence of session validation to create a new user with administrative privileges.