Janek Vind (waraxe) has found more security issues in phpnuke. We are reviewing his findings now and will report back soon. See this link for the gory details.