EIP-2026-108626

This exploit demonstrates an SQL injection vulnerability in the DM Orders component for Joomla! by injecting a UNION-based SQL query to extract user credentials from the database. The attack leverages unsanitized input in the 'id' parameter to manipulate the SQL query.