EIP-2026-111063

The exploit demonstrates a CSRF vulnerability in phpgallery v1.1.0, allowing remote attackers to change the admin password or upload a shell via crafted HTML forms. The PoC includes functional HTML/JavaScript code to trigger the vulnerability without requiring prior authentication.