EIP-2026-108669

This exploit demonstrates a SQL injection vulnerability in Joomla! Component Hbooking 1.9.9. The vulnerability is triggered via the 'h_id' parameter in the URL, allowing an attacker to inject malicious SQL queries.