CVE-2004-0269

This exploit targets a SQL injection vulnerability in PHPNuke 6.x and 5.x by manipulating the 'category' parameter in the search module to extract the admin password hash. It uses a brute-force approach to retrieve the hash character by character via ASCII values.

The writeup describes a SQL injection vulnerability in the Web_Links module of PHPNuke, allowing remote attackers to inject arbitrary SQL code via the 'cid' parameter. No actual exploit code is provided, only a description and example URL.