EIP-2026-108527

This is a functional SQL injection exploit for the Joomla com_schools component. It leverages a vulnerable parameter (schoolid) to extract user credentials from the jos_users table via a UNION-based SQLi attack.