Quake writes:A security issue with PHP-Nuke has been found in admin.php. This issue allows to add GOD admins easily to the admin. Bug reported to us by PeNdEjO (thanks alot).
I quickly made a fix and chatserv updated the packages. Its recommended that you get Nuke Patched 3.1 as quick as possible to avoid your site being hacked.
This issue does NOT affect NukeSentinel users or users that have a HTTP Authenticate check on their admin.php
Again, thanks to PeNdEjO
PHP-Nuke vulnerability! Get your fix NOW!Posted on Friday, July 29, 2005 @ 14:47:08 CDT in Security |