EIP-2026-119430

This is a functional CSRF exploit for SonicDICOM PACS 2.3.2 that adds an admin user via a crafted HTML form. The exploit leverages lack of CSRF protection to submit a POST request to the account creation endpoint.