EIP-2026-119344

This is a functional CSRF exploit for ActiTime 2.0-MA that demonstrates how an attacker can trick an authenticated administrator into creating a new user with arbitrary credentials via a crafted HTML form.