EIP-2026-109304

The provided text describes a SQL injection vulnerability in Mambo Open Source 4.0.14 Server, where insufficient sanitization of the 'artid' parameter in index.php allows attackers to manipulate database queries. The example URL demonstrates a UNION-based SQL injection attack.