EIP-2026-108823
PRE-CVEJoomla! Component paxxgallery 0.2 - 'gid' Blind SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-108823. PoCs published by ZAMUT.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in the Joomla PaxxGallery component by manipulating the 'gid' parameter to extract the administrator's password hash. It uses a time-based technique to infer characters of the hash by checking for error messages in the response.
Description
Joomla! Component paxxgallery 0.2 - 'gid' Blind SQL Injection
Exploits (1)
This Perl script exploits a blind SQL injection vulnerability in the Joomla PaxxGallery component by manipulating the 'gid' parameter to extract the administrator's password hash. It uses a time-based technique to infer characters of the hash by checking for error messages in the response.