EIP-2026-108432

PRE-CVE

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108432. PoCs published by jdc.

AI-analyzed exploit summary This exploit demonstrates SQL injection and multiple XSS vulnerabilities in Joomla Component Listbingo 1.3. The SQLi extracts user credentials, while the XSS payloads execute arbitrary JavaScript in both persistent and reflective contexts.

Description

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC
by jdc · textwebappsphp
https://www.exploit-db.com/exploits/13926

This exploit demonstrates SQL injection and multiple XSS vulnerabilities in Joomla Component Listbingo 1.3. The SQLi extracts user credentials, while the XSS payloads execute arbitrary JavaScript in both persistent and reflective contexts.

Classification
Working Poc 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target: Joomla Component Listbingo 1.3
No auth needed
Prerequisites: Access to the vulnerable Joomla component
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026