EIP-2026-108351

PRE-CVE

Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108351. PoCs published by jdc.

AI-analyzed exploit summary This exploit demonstrates Local File Include (LFI) and SQL Injection (SQLi) vulnerabilities in RSform! 1.0.5 for Joomla. The LFI allows reading arbitrary files via path traversal, while the SQLi leverages a time-based benchmark function for exploitation.

Description

Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by jdc · textwebappsphp

https://www.exploit-db.com/exploits/15443

View Code ZIP pw:eip

This exploit demonstrates Local File Include (LFI) and SQL Injection (SQLi) vulnerabilities in RSform! 1.0.5 for Joomla. The LFI allows reading arbitrary files via path traversal, while the SQLi leverages a time-based benchmark function for exploitation.

Classification

Working Poc 90%

Attack Type

Sqli | Info Leak

Complexity

Trivial

Reliability

Reliable

Target: RSform! 1.0.5 (Joomla)

No auth needed

Prerequisites: Joomla with RSform! 1.0.5 installed

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1005 - Data from Local System

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026