Secunia

Squid has reported a weakness in PHP-Nuke, which can be exploited by malicious people to bypass certain security restrictions.

The problem is that PHP-Nuke and multiple modules utilise an insufficient security check to prevent scripts from being accessed directly. This can be exploited via a specially crafted URL and may disclose path information and possibly (depending on the scripts) grant access to restricted resources.

The problem has been reported in the following products:
* PHP-Nuke 7.3 and prior
* Nuke Cops betaNC PHP-Nuke Bundle w/ PHPNuke 6.5 and later
* osc2nuke 7x version 1
* oscnukelite 3.1 and prior

Solution
Patches for some of the issues have reportedly been released.

Provided and/or discovered by
Squid

Deep Links
Links available in Customer Area