This exploit demonstrates a SQL injection vulnerability in PHP-Nuke's 'Siir' module, allowing unauthorized extraction of admin credentials from the 'nuke_authors' table. The payload uses a UNION-based SQLi technique to bypass authentication and retrieve sensitive data.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:PHP-Nuke (version unspecified)
No auth needed
Prerequisites:Target must be running a vulnerable version of PHP-Nuke with the 'Siir' module enabled