EIP-2026-109300

This exploit demonstrates a SQL injection vulnerability in the Mambo component Portfolio Manager 1.0. It leverages a union-based SQLi to extract username and password hashes from the 'mos_users' table.