EIP-2026-114443

This exploit demonstrates a CSRF vulnerability in Xnova Legacies 2009.2, allowing an attacker to escalate privileges by tricking an admin into visiting a crafted URL. The vulnerability lies in the `paneladmina.php` file, where user input is directly used in a SQL query without proper validation.