EIP-2026-108475

This is a writeup detailing multiple blind SQL injection vulnerabilities in PBBooking 1.0.4_3 Joomla Component. The vulnerabilities are in the 'timeslot' and 'id' parameters passed to controller.php, which are not properly sanitized before being used in SQL queries.