EIP-2026-108907

This exploit demonstrates a SQL injection vulnerability in Joomla! com_hdwplayer 4.2 via the 'search.php' file. The vulnerability arises from unsanitized user input in the 'hdwplayersearch' parameter, allowing arbitrary SQL queries.