This exploit targets the Mambo CMS versions 4.5.2.1 and below, as well as MySQL version 4.1. It allows an attacker to perform SQL injection by manipulating the user_rating parameter in the index.php file. By exploiting this vulnerability, an attacker can retrieve the password of a user with a specific ID.