EIP-2026-108580

This is a vulnerability writeup describing an SQL injection flaw in the 'com_virtualmoney' component for Joomla!. The issue arises from insufficient sanitization of user-supplied data in the 'catid' parameter, allowing attackers to manipulate SQL queries.