EIP-2026-109303

This exploit demonstrates SQL injection in Mambo Open Source via the 'pollBooth.php' script. The attacker manipulates the 'dbprefix' parameter to execute arbitrary SQL queries, allowing unauthorized modifications to the database, such as changing user privileges or passwords.