EIP-2026-109089

PRE-CVE

Learning Management System 0.1 - Authentication Bypass

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109089. PoCs published by lahilote.

AI-analyzed exploit summary This is a technical writeup detailing an SQL injection authentication bypass vulnerability in the Learning Management System (LMS) version 0.1. The exploit leverages improper input sanitization in login.php, allowing attackers to bypass authentication using a crafted SQL query (e.g., `admin' or '1'='1`).

Description

Learning Management System 0.1 - Authentication Bypass

Exploits (1)

exploitdb WRITEUP
by lahilote · textwebappsphp
https://www.exploit-db.com/exploits/40545

This is a technical writeup detailing an SQL injection authentication bypass vulnerability in the Learning Management System (LMS) version 0.1. The exploit leverages improper input sanitization in login.php, allowing attackers to bypass authentication using a crafted SQL query (e.g., `admin' or '1'='1`).

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Learning Management System (LMS) 0.1
No auth needed
Prerequisites: Access to the login page of the LMS application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026