EIP-2026-111237

This is a functional CSRF exploit targeting PHPWCMS 1.4.5 r398. It automates a form submission to rename a directory via a malicious HTML page, leveraging lack of CSRF tokens in the administrative interface.