EIP-2026-100828

The exploit demonstrates a command injection vulnerability in iOffice 0.1 by injecting a shell command (id) via the 'parametre' URL parameter. The lack of input sanitization allows arbitrary command execution on the underlying server.