EIP-2026-108340

This exploit demonstrates Local File Inclusion (LFI) and SQL Injection (SQLi) vulnerabilities in the Joomla component com_event. The LFI allows reading arbitrary files, while the SQLi can extract user credentials from the database.