EIP-2026-109270

This Perl script exploits a SQL injection vulnerability in Mambo CMS versions <= 4.5.2.1 with MySQL >= 4.1. It brute-forces the password hash of a specified user ID by leveraging a blind SQL injection in the 'user_rating' parameter.