EIP-2026-110849

PRE-CVE

PHP-Nuke 6.0/6.5 Forum Module - 'viewforum.php' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110849. PoCs published by frog.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in PHPNuke's Forum module via the 'viewforum.php' script. The attacker can inject SQL commands to manipulate the database, including writing arbitrary files to the server using the 'INTO OUTFILE' clause.

Description

PHP-Nuke 6.0/6.5 Forum Module - 'viewforum.php' SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by frog · textwebappsphp

https://www.exploit-db.com/exploits/22424

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in PHPNuke's Forum module via the 'viewforum.php' script. The attacker can inject SQL commands to manipulate the database, including writing arbitrary files to the server using the 'INTO OUTFILE' clause.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: PHPNuke (Forum module)

No auth needed

Prerequisites: Access to the target PHPNuke instance · Forum module enabled

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026