EIP-2026-111442

This exploit demonstrates an SQL injection vulnerability in the pnAddressbook module for PostNuke. The attacker can extract sensitive data such as usernames and password hashes by injecting a UNION-based SQL query.