EIP-2026-119342

This is a functional proof-of-concept for a Cross-Site Request Forgery (CSRF) vulnerability in Abyss Web Server X1. The exploit uses an auto-submitting HTML form to change the username and password of a logged-in user without their consent.