EIP-2026-109307

The provided text describes SQL injection and email spoofing vulnerabilities in Mambo Open Source Server 4.0.14, specifically in the banners.php, emailfriend/emailarticle.php, and contact.php modules. It includes an example SQL injection payload but lacks executable exploit code.