EIP-2026-110861

The exploit demonstrates an HTTP response splitting vulnerability in PHP-Nuke 7.6 by injecting CRLF sequences and arbitrary HTML content via the 'forwarder' parameter in the Surveys module. This allows an attacker to manipulate HTTP responses, potentially leading to cache poisoning or cross-site scripting attacks.