EIP-2026-111764

This exploit demonstrates a CSRF vulnerability in NPDS REvolution 10.02, allowing an attacker to inject PHP code into the 'footer_after' configuration file via a crafted HTTP request. The PoC uses an img tag to trigger the malicious request, potentially leading to remote code execution if the victim is an authenticated admin.