EIP-2026-108789

This PHP script exploits a blind SQL injection vulnerability in the Joomla MisterEstate component by brute-forcing the admin username and password via ASCII character extraction. It uses UNION-based SQLi to leak data from the jos_users table.