EIP-2026-108805

This exploit demonstrates a SQL injection vulnerability in the mygallery Joomla component, allowing an attacker to extract user credentials (username and password) from the jos_users table via a crafted UNION-based SQLi query.