EIP-2026-108852

The exploit demonstrates a SQL injection vulnerability in TNR Enhanced Joomla Search (com_esearch) version 3.0.0. The PoC URL injects a UNION-based SQL query to extract user credentials from the 'jos_users' table.