EIP-2026-105147

PRE-CVE

AlumniServer 1.0.1 - Authentication Bypass

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105147. PoCs published by YEnH4ckEr.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in AlumniServer v1.0.1, allowing authentication bypass by manipulating the login query. The vulnerability exists in the login.php file due to improper sanitization of user input.

Description

AlumniServer 1.0.1 - Authentication Bypass

Exploits (1)

exploitdb WORKING POC VERIFIED
by YEnH4ckEr · textwebappsphp
https://www.exploit-db.com/exploits/9019

This exploit demonstrates an SQL injection vulnerability in AlumniServer v1.0.1, allowing authentication bypass by manipulating the login query. The vulnerability exists in the login.php file due to improper sanitization of user input.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: AlumniServer v1.0.1
No auth needed
Prerequisites: magic_quotes=OFF
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026