EIP-2026-108454

This exploit demonstrates a SQL injection vulnerability in the Joomla 'com_news' component, allowing an attacker to extract user credentials (username and password) from the 'jos_users' table via a crafted UNION SELECT query.