EIP-2026-110868

This exploit demonstrates a blind SQL injection vulnerability in PHP-Nuke 8.0's Web_Links module. It uses benchmark-based timing attacks to extract the admin password hash by checking each character against a predefined charset.