EIP-2026-110848

The exploit describes a cross-site scripting (XSS) vulnerability in PHPNuke 6.0 where HTML tags are not filtered in the 'Search' page of the 'modules.php' script. An attacker can inject malicious JavaScript code to steal cookie-based authentication credentials.