EIP-2026-108171

This exploit targets Joomla 1.5.12 by leveraging an unauthorized file upload vulnerability to upload a PHP shell, followed by a local file inclusion (LFI) vulnerability to execute the shell and establish a reverse connection. The exploit automates the process of discovering the web root and bypassing authentication via TinyBrowser plugin weaknesses.