EIP-2026-108411

This PHP script exploits a blind SQL injection vulnerability in Joomla's com_joomlaconnect_be component to extract usernames and passwords from the jos_users table. It uses time-based inference by comparing response lengths to determine character values.