EIP-2026-108510

The exploit demonstrates SQL injection in Joomla component com_realestatemanager via the 'order_direction' and 'order_field' POST parameters. It includes two proof-of-concept payloads for boolean-based and error-based SQLi, confirming vulnerability in version 3.7 and likely prior versions.