EIP-2026-108827

PRE-CVE

Joomla! Component Permis 1.0 (com_groups) - 'id' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108827. PoCs published by Prince_Pwn3r.

AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in the Permis 'com_groups' component for Joomla! by injecting malicious SQL queries into the 'id' parameter. The provided URLs show blind SQL injection techniques to extract database version information.

Description

Joomla! Component Permis 1.0 (com_groups) - 'id' SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by Prince_Pwn3r · textwebappsphp
https://www.exploit-db.com/exploits/33125

The exploit demonstrates an SQL injection vulnerability in the Permis 'com_groups' component for Joomla! by injecting malicious SQL queries into the 'id' parameter. The provided URLs show blind SQL injection techniques to extract database version information.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Permis 1.0 for Joomla!
No auth needed
Prerequisites: Access to the vulnerable Joomla! component via HTTP
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026