EIP-2026-108374

This PHP script exploits a blind SQL injection vulnerability in Joomla's com_ijoomla_archive component to extract user passwords from the database. It uses time-based techniques to infer password characters by comparing response lengths.