PHP Web Host - Quality Web Hosting For All PHP Applications Sign up for PayPal and start accepting credit card payments instantly
  Login or Register
 • Home • Downloads • Your Account • Forums • 
Site Navigation

Home:
 
Donate o Meter
Help Keep Our Servers Online AND Our Services Free!
Make donations with PayPal!
Donat-o-Meter Stats
October´s Goal:  $300.00
Due Date:  Oct 31
Net Balance:  $67.37
Left to go:  $232.63
Donations
Doulos Oct-10
Mars Oct-3
 
Please Link To Me!
 
Services Available
Quality PHP Web Host!

Great Reviews!
Need help setting up your website, installing Apache, PHP, MySQL, or PhpNuke?
Need help customizing or designing scripts?
Please contact me via the Contact Us option for further details and pricing.
Link to Me

RavenPHPScripts

RavenPHPScripts

There are more Link To Me icons here.
 
Site Info v2.2.2 ©
Your IP: 38.103.63.61

Welcome, Anonymous
Nickname
Password
Security Code:
Security Code
Type Security Code:

· Register
· Lost Password
Server Date/Time
12 October 2008 07:28:30 EDT (GMT -4)
 
Verse of the Day
 
phpNuke Security Alert - ALL VERSIONS 
Security
guardian2003 writes "

It is unfortunate that I have to start the New Year with this news item but I would be failing the members of this community if I did not bring it to your attention.

There exists a vulnerability in virgin phpNuke which affects ALL versions as far as I have been able to ascertain. This vulnerability was reported to the author when phpNuke 7.6 was released and still remains within the virgin code even in the current version (phpNuke 8.1).


One can only conclude that the author is happy with a potential 3,020,000 affected sites**.

The vulnerability allows anonymous users to bypass the security code in order for them to create an account and/or post in the forums.
Please - ensure you have the latest patches or upgrade to RavenNuke.

RavenNuke™ is not susceptible to this exploit as it uses a proper CAPTCHA.

My thanks to http://websecurity.com.ua for reminding me of this vulnerability.

** - Figure based on a Google search for "powered by PHP-Nuke" which is exactly how they'll find you!
Do not become one of the other statistics!

Note: RavenNuke™ is not susceptible to this exploit






"
Posted on Friday, January 04, 2008 @ 14:07:24 EST by Raven
 
Related Links
· More about Security
· News by Raven
Most read story about Security:
PHP-Nuke *eid* SQL Injection Vulnerability
 
Article Rating
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad
 
Options

 Printer Friendly Page  Printer Friendly Page

 Send to a Friend  Send to a Friend
 
Associated Topics

PHP-Nuke

 

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2002-2008 by Raven
Proud to be listed at Lobo Links Web Directory

You can syndicate our news using the file xml

CSE HTML Validator Helped Clean up This Page! [Valid RSS] valid RSS 2.0 Valid robots.txt Stop Spam Harvesters, Join Project Honey Pot

Website engines core code is © copyright by PHP-Nuke but has been heavily patched and modified by myself and others.
PHP-Nuke is a free software released under the GNU/GPL.

:: fisubice phpbb2 style by Daz :: PHP-Nuke theme by www.nukemods.com ::

:: fisubice Theme Recoded To 100% W3C CSS & HTML 4.01 Transitional Compliance by Raven and 64bitguy ::

:: W3C CSS Compliance Validation :: W3C HTML 4.01 Transitional Compliance Validation ::

zerosum