EIP-2026-108756

The exploit demonstrates a blind SQL injection vulnerability in Joomla's JReservation component (version 1.0) via the 'id' parameter. It uses time-based techniques (BENCHMARK) to infer database information, confirming the vulnerability through response timing differences.