EIP-2026-114544

PRE-CVE

YourArcadeScript 2.0b1 - Blind SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114544. PoCs published by DNX.

AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in YourArcadeScript v2.0b1 by injecting malicious input into the 'username' parameter during registration, allowing an attacker to extract the admin password character by character.

Description

YourArcadeScript 2.0b1 - Blind SQL Injection

Exploits (1)

exploitdb WORKING POC
by DNX · perlwebappsphp
https://www.exploit-db.com/exploits/12785

This Perl script exploits a blind SQL injection vulnerability in YourArcadeScript v2.0b1 by injecting malicious input into the 'username' parameter during registration, allowing an attacker to extract the admin password character by character.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: YourArcadeScript v2.0b1
No auth needed
Prerequisites: magic_quotes_gpc = Off · Network access to the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026