EIP-2026-109295

This exploit demonstrates SQL injection vulnerabilities in the Mambo CMS n-gallery component, allowing unauthorized extraction of user credentials (username and password) from the mos_users table. The PoC provides two distinct SQLi payloads for different contexts.