EIP-2026-108197

The exploit demonstrates a SQL injection vulnerability in Joomla AJAX Shoutbox via the 'jal_lastID' parameter, allowing attackers to execute arbitrary SQL queries. The provided example shows a UNION-based attack to extract user credentials from the database.