EIP-2026-108521

The exploit demonstrates an SQL injection vulnerability in the 'com_rsgallery2' component for Joomla! by injecting a UNION-based SQL query to extract user credentials (username and password) from the 'jos_users' table. The attack leverages insufficient input sanitization in the 'catid' parameter.