{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "joomla",
    "mysql",
    "sp-page-builder"
  ],
  "proof_artifacts": [
    "logs/vuln_compose.log",
    "logs/vuln_poc.log",
    "logs/fixed_compose.log",
    "logs/fixed_poc.log"
  ],
  "notes": "Vulnerable 6.6.1 allowed unauthenticated RCE via asset.uploadCustomIcon; fixed 6.6.2 rejected the upload."
}