Some vulnerabilities have been reported in PHP-Nuke, where some have unknown impacts and others can be exploited by malicious people to conduct SQL injection attacks.

1) Some unspecified errors exists in the wysiwyg editor with an unknown impact.

2) Some unspecified input passed in "modules.php" and the News module isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Solution
Update to version 7.9.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by vendor
2) The vendor credits Zhen-Xjell

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.phpnuke.org/modules.php?name=News&file=article&sid=7435

Deep Links
Links available to Secunia VIM customers