EIP-2026-108654

The exploit demonstrates an SQL injection vulnerability in the 'Foto' component for Joomla! by injecting a malicious SQL query via the 'id_categoria' parameter. This allows an attacker to extract sensitive data such as usernames and passwords from the 'jos_users' table.