EIP-2026-108145
PRE-CVEJoomla! / Mambo Component com_iigcatalog - 'cat' SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-108145. PoCs published by S@BUN.
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in the Joomla! and Mambo 'com_iigcatalog' component by injecting a UNION-based SQL query to extract user credentials from the 'mos_users' table. The attack leverages insufficient input sanitization in the 'cat' parameter.
Description
Joomla! / Mambo Component com_iigcatalog - 'cat' SQL Injection
Exploits (1)
The exploit demonstrates an SQL injection vulnerability in the Joomla! and Mambo 'com_iigcatalog' component by injecting a UNION-based SQL query to extract user credentials from the 'mos_users' table. The attack leverages insufficient input sanitization in the 'cat' parameter.