EIP-2026-110884

This is a functional SQL injection exploit for PHP-Nuke's SPChat module, allowing an attacker to extract user details from the database via a crafted HTTP request. The exploit demonstrates a UNION-based SQLi attack to retrieve password hashes from the 'nuke_authors' table.