[40350] in bugtraq
Re: PHP Nuke <= 7.8 Multiple SQL Injections
daemon@ATHENA.MIT.EDU (Paul Laudanski)
Fri Sep 16 18:26:26 2005
Date: Thu, 15 Sep 2005 19:46:10 -0400 (EDT)
From: Paul Laudanski <zx@castlecops.com>
To: evaders99@gmail.com
Cc: bugtraq@securityfocus.com, <bugs@securitytracker.com>,
<moderators@osvdb.org>, <news@securiteam.com>, <vuln@secunia.com>
In-Reply-To: <20050914195932.24381.qmail@securityfocus.com>
Message-ID: <Pine.LNX.4.44.0509151943520.7897-100000@bugsbunny.castlecops.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On 14 Sep 2005 evaders99@gmail.com wrote:
> I'd just like to report as a solution: the Nuke Patched files. These are being developed to cover all the latest vulnerabilities, and to fix issues with previous versions of phpNuke.
>
> These changes will be implemented to our CVS and package downloads soon.
The PHP-Nuke vendor @ http://phpnuke.org has already released a security
fix to this immediately. It is strongly advised to run the patch.
Read the vendor's disclosure:
http://phpnuke.org/modules.php?name=News&file=article&sid=7434
The patch is for all PHP-Nuke 7.8 and older.
--
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops(SM), http://castlecops.com
________ Information from Computer Cops, L.L.C. ________
This message was checked by NOD32 Antivirus System for Linux Mail Server.
part000.txt - is OK
http://castlecops.com
