EIP-2026-108545

This is a technical writeup describing a blind SQL injection vulnerability in the SOBI2 Joomla! component versions prior to 2.9.4. The vulnerability is triggered via the 'tag' and 'letter' parameters when URL-encoded, as detailed in the changelog and advisory.