EIP-2026-108823

This Perl script exploits a blind SQL injection vulnerability in the Joomla PaxxGallery component by manipulating the 'gid' parameter to extract the administrator's password hash. It uses a time-based technique to infer characters of the hash by checking for error messages in the response.