EIP-2026-108549

This exploit demonstrates a SQL injection vulnerability in the Joomla component com_spa, allowing an attacker to extract user credentials from the jos_users table via a UNION-based attack.