EIP-2026-110882

The exploit demonstrates an SQL injection vulnerability in the Gallery module for PHP-Nuke by injecting a malicious SQL query via the 'artid' parameter. The query performs a UNION-based attack to extract admin credentials from the 'nuke_authors' table.