Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102882. PoCs published by HaHwul.
AI-analyzed exploit summary This Ruby script exploits a command injection vulnerability in iSQL 1.0 by injecting arbitrary commands into the password field, which is passed unsanitized to a system call via popen(). The exploit demonstrates RCE by chaining commands in the password input during authentication.
Description
iSQL 1.0 - Command Injection
Exploits (1)
exploitdb
WORKING POC
by HaHwul · rubylocallinux
https://www.exploit-db.com/exploits/39938
This Ruby script exploits a command injection vulnerability in iSQL 1.0 by injecting arbitrary commands into the password field, which is passed unsanitized to a system call via popen(). The exploit demonstrates RCE by chaining commands in the password input during authentication.
Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
iSQL 1.0
No auth needed
Prerequisites:
iSQL 1.0 binary in the same directory · direct access to the iSQL prompt
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026