You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 538 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
!!! WARNING !!! PHP-Nuke package to highjack userinfo !!! WARNING !!!
SecurityBobMarion writes "After having recieved a report from one of my users that a new PHP-Nuke package seemed to cause him to get spanish spam I opened the package and found that the Your Account module has 3 calls to copy any new user info to another site. The package comes from PHP-Nuke 7.8 RC8 OP ES. This is just one case of never using non-trusted sites packages!"
Posted on Sunday, August 21 @ 01:21:28 CEST by VinDSL
 
Related Links
· Computer Cops
· More about Security
· News by VinDSL


Most read story about Security:
PHP-Nuke admin.php security hole - PATCHED

Article Rating
Average Score: 5
Votes: 2


Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad


Options

 Printer Friendly Page  Printer Friendly Page

 Send to a Friend  Send to a Friend

Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: !!! WARNING !!! PHP-Nuke package to highjack userinfo !!! WARNING !!! (Score: 1)
by Xyberian (fake@earth.unverse) on Sunday, August 21 @ 03:11:35 CEST
(User Info | Send a Message) http://www.nukekorea.net
Good notice, Bob. That might be happened as I've suspected. Anyhow, thanks for letting us know the possiblility.



Re: !!! WARNING !!! PHP-Nuke package to highjack userinfo !!! WARNING !!! (Score: 1)
by gt on Sunday, August 21 @ 05:51:44 CEST
(User Info | Send a Message)
idiot the module of requested is alone for those who want to work with the module idiot is disconnected

http://www.phpnuke-espanol.org


PHP-Nuke 7.4 Requested ones PHP-Nuke 7.3 Mail Direct PHP-Nuke 7.2 Mail Direct


anyhow I do not want that he publishes more my versions in his web

this version to been extracted for Spanish you do not have to give accounts about this version

calm you that not him boy to ordering no news more for disgusting

You are dumb and he does not find out

if it had wanted to cheat you idiot would have covered solitado it had not put it to the light



Re: !!! WARNING !!! PHP-Nuke package to highjack userinfo !!! WARNING !!! (Score: 1)
by gt on Sunday, August 21 @ 05:52:12 CEST
(User Info | Send a Message)
the one who is you to say that thing about my version everything is a lie I would not like also that to say the same on his programs the half of the visits that it receives in his web to been thanks to me to if that porfavor not the estrope saying lies

the module of requested is alone for those who want to work with the module is not activated

PHP-Nuke 7.4 Requested ones
PHP-Nuke 7.3 Mail Direct
PHP-Nuke 7.2 Mail Direct
PHP-Nuke 7.4 IS OP R1

http: // www.phpnuke-espanol.org/

I work this way if he does not like do not publish the news but do not say lies

cualquer web of phpnuke in Spanish will realize that to could only publishing badly this article

The Spanish are feeling like bad reputation to his web as I I repeat the code again impremento to work with requested it is an exclusive version in Spanish not for Englishmen this is what it spends to him for not finding out first

a greeting



Re: !!! WARNING !!! PHP-Nuke package to highjack userinfo !!! WARNING !!! (Score: 1)
by rwxrwxrwx on Monday, August 22 @ 09:04:00 CEST
(User Info | Send a Message) http://www.ratboyz.com/
Please don't insult others by calling them dumb and idiot.

If you feel BobMarion's comment is not correct, then explain clearly the purpose of this module. Saying this version is for Spanish only not Englishmen does not explain why you added code to send new user info is to another site.


Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.114 Seconds - 214 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::