EIP-2026-114383

The exploit demonstrates a CSRF vulnerability in WPN-XM Serverstack for Windows, allowing attackers to modify PHP.INI settings and MySQL credentials via crafted HTML forms. The PoC includes functional code to hijack MySQL default settings and enable dangerous PHP configurations like 'allow_url_include'.