Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » PHP-Nuke banner manager password disclosure

PHP-Nuke banner manager password disclosure

by Nikola Strahija on March 29th, 2003 A vulnerability has been found in PHPNuke that allows a remote attacker to send a string through the script and thus manipulate some parts of the database.


Vulnerable:
PHP-Nuke 6.5, RC1, RC2, RC3
PHP-Nuke 6.0
PHP-Nuke 5.6


Solution:
Un-confirmed patch:
- http://www.frogsecure.com/tutos/PHP-Nuke-News.txt


Discovered by:
Frog Man, leseulfrog (at) hotmail.com


References:
Frog Man's site:
- http://www.phpsecure.info


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »