EIP-2026-108150

The exploit demonstrates an SQL injection vulnerability in the Joomla! and Mambo 'com_lexikon' component by injecting a UNION-based SQL query to extract user credentials from the 'mos_users' table. The payload bypasses input sanitization by using comment sequences and concatenation to retrieve usernames and passwords.