EIP-2026-111435

This is a technical writeup describing an information disclosure vulnerability in PostNuke due to the presence of an unremoved 'install.php' script after installation, which can leak administrator credentials. The issue is trivial to exploit by accessing the script directly via a URL.