Description: A vulnerability has been discovered in PHP-Nuke, which can be exploited by malicious people to conduct cross-site scripting or cross-site request forgery attacks.
The vulnerability is caused due to an error within the anti-cross-site request forgery routine. This can be exploited to bypass the routine and e.g. execute arbitrary HTML and script code in a user's browser session in context of an affected site by passing malicious input to the search function of the downloads module.
Successful exploitation requires that "register_globals" is disabled.
The vulnerability is confirmed in version 7.9 and reported in version 8. Other versions may also be affected.
Solution: Edit the source code to ensure that input is properly verified.
Provided and/or discovered by: Francesco `ascii` Ongaro and Stefano `wisec` di Paola
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
