EIP-2026-108603

This is a writeup describing a blind SQL injection vulnerability in the Xmap Joomla component version 1.2.11. The vulnerability is exploitable via the 'view' parameter when the cache is disabled, and it was patched in version 1.2.12.