PHP-Nuke 7.4 has a cross site scripting flaw that allows an attacker administrative access.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34262/codelabs-01.txt
Source: https://packetstormsecurity.com/files/34262/CODEBUG-Labs-Security-Advisory-1.html