PHP-Nuke 7.4 has a cross site scripting flaw that allows an attacker the ability to view admin account information. It is an old bug that has a patch that can be bypassed if the data is sent via a POST instead of a GET.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34271/codelabs-03.txt
Source: https://packetstormsecurity.com/files/34271/CODEBUG-Labs-Security-Advisory-3.html