EIP-2026-108241

PRE-CVE

Joomla! Component City Portal - Blind SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108241. PoCs published by FL0RiX.

AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in the Joomla Component City Portal. The provided URLs show how to manipulate the 'Itemid' parameter to trigger SQL conditions, allowing an attacker to infer database information.

Description

Joomla! Component City Portal - Blind SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by FL0RiX · textwebappsphp
https://www.exploit-db.com/exploits/10550

This exploit demonstrates a blind SQL injection vulnerability in the Joomla Component City Portal. The provided URLs show how to manipulate the 'Itemid' parameter to trigger SQL conditions, allowing an attacker to infer database information.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Joomla Component City Portal
No auth needed
Prerequisites: Access to the vulnerable Joomla component
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026