EIP-2026-108728

PRE-CVE

Joomla! Component JO Facebook Gallery 4.5 - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108728. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Joomla! Component JO Facebook Gallery v4.5 via the 'id' parameter in multiple views (category, albums, photo). It provides direct URLs for exploitation without requiring authentication.

Description

Joomla! Component JO Facebook Gallery 4.5 - SQL Injection

Exploits (1)

exploitdb WORKING POC

by Ihsan Sencan · textwebappsphp

https://www.exploit-db.com/exploits/41445

View Code ZIP pw:eip

The exploit demonstrates SQL injection vulnerabilities in Joomla! Component JO Facebook Gallery v4.5 via the 'id' parameter in multiple views (category, albums, photo). It provides direct URLs for exploitation without requiring authentication.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Joomla! Component JO Facebook Gallery v4.5

No auth needed

Prerequisites: Access to the target Joomla! instance with the vulnerable component installed

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026