EIP-2026-100789

This exploit demonstrates a command injection vulnerability in DotItYourself by appending a semicolon and arbitrary command to the 'download' parameter. The vulnerability arises from insufficient input sanitization, allowing remote command execution.