EIP-2026-109284

This PHP script exploits a blind SQL injection vulnerability in Mambo CMS's com_sim component to extract username and password from the mos_users table. It uses time-based inference by comparing response lengths to determine character values.