# Exploit Title: OpenAdmin 0.3.4 - Multiple CSRF Vulnerabilities
# Date: Nov 8, 2024
# Exploit Author: Punthat Siriwan, Korn Chaisuwan, Manich Koomsusi, Pongtorn Angsuchotmetee
# Vendor Homepage: https://openpanel.com/
# Software Link: https://openpanel.com/
# Version: 0.3.4
# Tested on: macOS
# CVE : CVE-2025-25873
##-- CSRF at Advanced Change Root Password --##
##-- CSRF at Users --##