EIP-2026-108278

This PHP script exploits a blind SQL injection vulnerability in the 'com_bfsurvey_pro' component of Joomla by manipulating the 'catid' parameter. It extracts the username and password from the 'jos_users' table using time-based inference techniques.