EIP-2026-111505

The exploit demonstrates an SQL injection vulnerability in the Chess Club 'com_pcchess' component for Joomla! and Mambo. It leverages unsanitized user input in the 'user_id' parameter to extract user credentials from the database via a UNION-based SQLi attack.