EIP-2026-118637

This exploit demonstrates a CSRF vulnerability in Home FTP Server 1.10.3 (build 144) by crafting an HTML image tag that sends a malicious request to add a new user with administrative privileges. The attack leverages the lack of CSRF protection to perform unauthorized actions.