EIP-2026-108785

The exploit demonstrates a SQL injection and a remote file inclusion vulnerability in Joomla. The SQLi extracts user credentials by manipulating the event description field, while the RFI allows uploading a malicious PHP shell disguised as an image.