EIP-2026-108485

This PHP script exploits a SQL injection vulnerability in Joomla <=1.0.15 with the com_pms component <=2.0.4. It injects a malicious SQL query to extract usernames and passwords from the jos_users table via a UNION-based attack.