EIP-2026-109282

This is a functional SQL injection exploit for Mambo CMS with the com_akogallery component. The PoC demonstrates a UNION-based SQLi to extract user credentials (username, password, email) from the mos_users table.