EIP-2026-108263

This exploit demonstrates a SQL injection vulnerability in the Joomla component com_alfurqan15x, allowing an attacker to extract user credentials via a crafted UNION-based SQL query. The vulnerable parameter is 'surano' in the 'viewayat' action.