EIP-2026-110840

This exploit demonstrates a SQL injection vulnerability in PHPNuke's News module, allowing an attacker to manipulate database queries to escalate privileges or change user passwords. The attack leverages improper input validation in the article.php file when magic_quotes_gpc is disabled.