EIP-2026-108152

The exploit demonstrates an SQL injection vulnerability in the Joomla! and Mambo 'com_most' component by injecting a UNION-based SQL query to extract user credentials from the database. The attack leverages insufficient input sanitization in the 'secid' parameter.