default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.
- https://www.exploit-db.com/exploits/2849
No PoCs found on GitHub currently.