EIP-2026-108505

This PHP script exploits a blind SQL injection vulnerability in Joomla's com_races component by inferring database content through response length differences. It extracts the first username and password from the jos_users table.