EIP-2026-109286

This is a writeup describing SQL injection vulnerabilities in the 'com_docman' component for Mambo. It provides example URLs demonstrating how an attacker could exploit the vulnerabilities by injecting malicious SQL queries through the 'limit' and 'limitstart' parameters.