EIP-2026-108221

PRE-CVE

Joomla! Component Biblioteca 1.0 Beta - Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108221. PoCs published by Salvatore Fresta.

AI-analyzed exploit summary This document details multiple SQL injection vulnerabilities in the Biblioteca 1.0 Beta Joomla component, including blind SQLi and direct SQLi via the 'testo' parameter in various scripts. It provides technical analysis and sample exploit URLs but does not include functional exploit code.

Description

Joomla! Component Biblioteca 1.0 Beta - Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP
by Salvatore Fresta · textwebappsphp
https://www.exploit-db.com/exploits/14703

This document details multiple SQL injection vulnerabilities in the Biblioteca 1.0 Beta Joomla component, including blind SQLi and direct SQLi via the 'testo' parameter in various scripts. It provides technical analysis and sample exploit URLs but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Biblioteca 1.0 Beta Joomla Component
No auth needed
Prerequisites: Access to vulnerable Joomla component · Network access to the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026