More For Nuke

[TCH-Rob]

The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error.

 

 

This may be used to carry out other attacks such as brute-force attempts against the login page.

No fix yet.

 

And;

 

Search Module SQL Injection Vulnerability that should have a patch available.

[TCH-Bruce]

Thanks Rob

[TCH-Thomas]

Thanks Rob.

[TCH-Don]

Thanks Rob