EIP-2026-108175

PRE-CVE

Joomla! 1.5.x - SQL Error Information Disclosure

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108175. PoCs published by YGN Ethical Hacker Group.

AI-analyzed exploit summary This advisory describes an SQL injection vulnerability in Joomla! versions prior to 1.5.22, which can lead to information disclosure. The issue is related to the 'filter_order' and 'filter_order_Dir' parameters, as demonstrated in the referenced images.

Description

Joomla! 1.5.x - SQL Error Information Disclosure

Exploits (1)

exploitdb WRITEUP VERIFIED

by YGN Ethical Hacker Group · textwebappsphp

https://www.exploit-db.com/exploits/34955

View Code ZIP pw:eip

This advisory describes an SQL injection vulnerability in Joomla! versions prior to 1.5.22, which can lead to information disclosure. The issue is related to the 'filter_order' and 'filter_order_Dir' parameters, as demonstrated in the referenced images.

Classification

Writeup 80%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Joomla! < 1.5.22

No auth needed

Prerequisites: Access to a vulnerable Joomla! instance

MITRE ATT&CK

T1505 - Server Software Component T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026