EIP-2026-108833

This exploit demonstrates an unauthenticated SQL injection vulnerability in the Huge-IT Portfolio Gallery Joomla extension v1.0.6. The vulnerability arises from improper sanitization of the 'galleryid' POST parameter in ajax_url.php, allowing attackers to inject malicious SQL queries.