EIP-2026-110871

This exploit targets a blind SQL injection vulnerability in PHP-Nuke's Your_Account module by leveraging benchmark-based timing attacks to extract the admin password hash. It uses LWP::UserAgent to send crafted requests and measures response times to infer character values.