Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110860. PoCs published by unitedbr.
AI-analyzed exploit summary This is a functional SQL injection exploit for PHP-Nuke 7.5 to 7.8 that extracts MD5 password hashes from the `nuke_authors` table via a crafted HTTP POST request to the Search module.
Description
PHP-Nuke 7.5 < 7.8 - 'Search' SQL Injection
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by unitedbr · c++webappsphp
https://www.exploit-db.com/exploits/1523
This is a functional SQL injection exploit for PHP-Nuke 7.5 to 7.8 that extracts MD5 password hashes from the `nuke_authors` table via a crafted HTTP POST request to the Search module.
Classification
Working Poc 100%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
PHP-Nuke 7.5-7.8
No auth needed
Prerequisites:
Target must be running PHP-Nuke 7.5-7.8 with the Search module accessible
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026