EIP-2026-108473

This PHP script exploits a blind SQL injection vulnerability in Joomla's com_paxgallery component to extract usernames and passwords from the jos_users table. It uses time-based inference by comparing response lengths to determine character values.