EIP-2026-108162

PRE-CVE

Joomla! / Mambo Component ensenanzas - 'id' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108162. PoCs published by The-0utl4w.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in the 'ensenanzas' component for Joomla! and Mambo. The vulnerability allows an attacker to extract user credentials from the database by injecting a UNION-based SQL query.

Description

Joomla! / Mambo Component ensenanzas - 'id' SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by The-0utl4w · textwebappsphp

https://www.exploit-db.com/exploits/31382

View Code ZIP pw:eip

This exploit demonstrates an SQL injection vulnerability in the 'ensenanzas' component for Joomla! and Mambo. The vulnerability allows an attacker to extract user credentials from the database by injecting a UNION-based SQL query.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Joomla! and Mambo with 'ensenanzas' component

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026