PHP-Nuke Patched 2.5 includes a more effective file access protection and all
other fixes found in Sec-Fix Patch 7.3 plus additional variable validation to
better protect against XSS and SQL injection attacks. The list of changes will
be published at NukeFixes over the next
few days, some are already available. My apologies to those using PHP-Nuke 6.0
but its patch only underwent minor changes and does not include all the new fixes,
8 versions are a bit too much to edit, eventually this patch will only be updated
for 7.x versions.
Download Locations:
Nuke
60 - Nuke
6.5 - Nuke
6.6-6.8 - Nuke
6.9 - Nuke
7.0 - Nuke
7.1 - Nuke
7.2 and Nuke
7.3
The patches for 6.5 and up include a config.php file, make sure you edit it using yours as a template before uploading it.