EIP-2026-108196

PRE-CVE

Joomla! Component AJAX Search for K2 2.2 - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108196. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Joomla! Component AJAX Search for K2 v2.2 via crafted HTTP GET parameters. It provides specific URLs with injection points in 'module_id' and 'efields[][]' parameters.

Description

Joomla! Component AJAX Search for K2 2.2 - SQL Injection

Exploits (1)

exploitdb WORKING POC

by Ihsan Sencan · textwebappsphp

https://www.exploit-db.com/exploits/41446

View Code ZIP pw:eip

The exploit demonstrates SQL injection vulnerabilities in Joomla! Component AJAX Search for K2 v2.2 via crafted HTTP GET parameters. It provides specific URLs with injection points in 'module_id' and 'efields[][]' parameters.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Joomla! Component AJAX Search for K2 v2.2

No auth needed

Prerequisites: Access to the target Joomla! instance with the vulnerable component installed

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026