EIP-2026-108138

This exploit demonstrates an SQL injection vulnerability in the 'com_buslicense' component for Mambo/Joomla. It leverages unsanitized user input in the 'aid' parameter to perform a UNION-based SQL injection, extracting usernames and passwords from the 'mos_users' table.