Several input validation errors have been reported in PHP-Nuke, which could be exploited by malicious people to manipulate existing SQL queries by conducting SQL injection attacks against the application.

Successful exploitation of the vulnerabilities require that the option "magic_quotes_gpc" is set to "OFF" in the PHP configuration file.

Generally, the majority of PHP scripts, which can be downloaded from the Internet do not filter malicious characters, since these can be escaped by using the option "magic_quotes_gpc" in PHP, which is set to "ON" by default.

Solution
Make sure "magic_quotes_gpc" is set to "ON" in the PHP configuration file. If this has to be set to "OFF" for some reason, then edit the source code to validate user input.

Provided and/or discovered by
frog-m@n

Original Advisory
In French:
http://www.frog-man.org/tutos/PHP-Nuke6.0-Members_List-Your_Account.txt
http://www.frogsecure.com/tutos/PHP-Nuke6.0-Forums-Private_Messages.txt
http://www.frogsecure.com/tutos/PHP-Nuke-News.txt

Deep Links
Links available in Customer Area