EIP-2026-108775

This exploit demonstrates a SQL injection vulnerability in Joomla! Component LMS King Professional v3.2.4.0. The vulnerability is triggered via a crafted HTTP request to the 'cp_id' parameter in the 'learningpath' layout, allowing arbitrary SQL queries to be executed.