I find a bug in some versions of htmltonuke.



servers with php-nuke installed are not vulnerables



some versions of htmltonuke only have permisions to acces to html files, 

but if you tipe the script before a invalid html file, the script are 

executed.



exploit:



http://www.example.com/htmltonuke.php?filnavn=[SCRIPT]%20example.html