EIP-2026-113269

This PoC demonstrates a CSRF vulnerability in webERP that allows an attacker to add a new administrator account. It also mentions an SQL injection vulnerability that can be exploited if magic_quotes_gpc is disabled.