EIP-2026-109277

The exploit demonstrates a SQL injection vulnerability in the Mambo CMS component com_acnews. It provides specific URLs with crafted input to exploit the vulnerability, including a UNION-based attack to dump user credentials.