EIP-2026-110861
PRE-CVEPHP-Nuke 7.6 Surveys Module - HTTP Response Splitting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-110861. PoCs published by Dcrab.
AI-analyzed exploit summary The exploit demonstrates an HTTP response splitting vulnerability in PHP-Nuke 7.6 by injecting CRLF sequences and arbitrary HTML content via the 'forwarder' parameter in the Surveys module. This allows an attacker to manipulate HTTP responses, potentially leading to cache poisoning or cross-site scripting attacks.
Description
PHP-Nuke 7.6 Surveys Module - HTTP Response Splitting
Exploits (1)
The exploit demonstrates an HTTP response splitting vulnerability in PHP-Nuke 7.6 by injecting CRLF sequences and arbitrary HTML content via the 'forwarder' parameter in the Surveys module. This allows an attacker to manipulate HTTP responses, potentially leading to cache poisoning or cross-site scripting attacks.