EIP-2026-110841

This exploit targets a SQL injection vulnerability in PHP-Nuke's News module by manipulating the 'score' parameter in a crafted HTTP request. It allows an attacker to alter database entries for news articles by converting input strings into ASCII values and injecting them into the SQL query.