EIP-2026-111484

This exploit demonstrates a CSRF vulnerability in Prediction Football 2.51, allowing an attacker to change a user's password by replaying a crafted POST request. The attack leverages the lack of CSRF protection in the password change functionality.