EIP-2026-109295

PRE-CVE

Mambo Component N-Gallery - Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109295. PoCs published by AlbaniaN-[H].

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in the Mambo CMS n-gallery component, allowing unauthorized extraction of user credentials (username and password) from the mos_users table. The PoC provides two distinct SQLi payloads for different contexts.

Description

Mambo Component N-Gallery - Multiple SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED

by AlbaniaN-[H] · textwebappsphp

https://www.exploit-db.com/exploits/5980

View Code ZIP pw:eip

This exploit demonstrates SQL injection vulnerabilities in the Mambo CMS n-gallery component, allowing unauthorized extraction of user credentials (username and password) from the mos_users table. The PoC provides two distinct SQLi payloads for different contexts.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Mambo CMS with n-gallery component

No auth needed

Prerequisites: Target must be running Mambo CMS with the vulnerable n-gallery component

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026