EIP-2026-108328

This PHP script exploits a blind SQL injection vulnerability in Joomla's com_digistore component by inferring database content through response length differences. It extracts the first user's username and password from the jos_users table.