Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109275. PoCs published by GulfTech Security.
AI-analyzed exploit summary This writeup describes an SQL injection vulnerability in Mambo CMS <= 4.5.4, allowing authentication bypass via manipulated cookie values. The exploit leverages improper sanitization of the password field when passed via cookies, enabling an attacker to log in as any user, including admin, and potentially execute arbitrary PHP code.
Description
Mambo < 4.5.4 - SQL Injection
Exploits (1)
This writeup describes an SQL injection vulnerability in Mambo CMS <= 4.5.4, allowing authentication bypass via manipulated cookie values. The exploit leverages improper sanitization of the password field when passed via cookies, enabling an attacker to log in as any user, including admin, and potentially execute arbitrary PHP code.