EIP-2026-108781

The exploit demonstrates an SQL injection vulnerability in the 'com_maplocator' component for Joomla! by injecting a malicious SQL query via the 'cid' parameter. It retrieves user credentials (username and password) from the 'jos_users' table, confirming the vulnerability's exploitability.