EIP-2026-108372

This PHP script exploits a blind SQL injection vulnerability in Joomla's com_ice component to extract usernames and passwords from the jos_users table. It uses time-based inference by comparing response lengths to determine character values.