EIP-2026-108658

PRE-CVE

Joomla! Component Gallery XML 1.1 - SQL Injection / Local File Inclusion

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108658. PoCs published by jdc.

AI-analyzed exploit summary The exploit demonstrates SQL injection and local file inclusion vulnerabilities in the Gallery XML Joomla! component. It provides URLs with crafted input to exploit these vulnerabilities, allowing an attacker to access sensitive data or execute local scripts.

Description

Joomla! Component Gallery XML 1.1 - SQL Injection / Local File Inclusion

Exploits (1)

exploitdb WORKING POC VERIFIED

by jdc · textwebappsphp

https://www.exploit-db.com/exploits/34159

View Code ZIP pw:eip

The exploit demonstrates SQL injection and local file inclusion vulnerabilities in the Gallery XML Joomla! component. It provides URLs with crafted input to exploit these vulnerabilities, allowing an attacker to access sensitive data or execute local scripts.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Gallery XML Joomla! component

No auth needed

Prerequisites: Access to the target Joomla! instance with the vulnerable Gallery XML component installed

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026