EIP-2026-110877

This exploit targets a SQL injection vulnerability in PHP-Nuke versions <8.0, specifically in the News module. It extracts admin credentials (username and password hash) by manipulating the 'sid' parameter in a UNION-based SQL injection attack.