EIP-2026-108905

This exploit demonstrates an information leak vulnerability in Joomla! com_booking component 2.4.9, allowing unauthenticated attackers to enumerate user accounts by brute-forcing user IDs via a crafted GET request. The script automates the process by iterating through user IDs and extracting user details (name, username, email) from the JSON response.