I find a bug in some versions of htmltonuke.

servers with php-nuke installed are not vulnerables

some versions of htmltonuke only have permisions to acces to html files,
but if you tipe the script before a invalid html file, the script are
executed.

exploit:

http://www.example.com/htmltonuke.php?filnavn=[SCRIPT]%20example.html