PHP-Nuke admin.php security hole - PATCHED
Date: Sunday, October 12 @ 22:37:44 CEST
Topic: Security
Recently a security hole was announced in reference to an admin.php exploit where anyone can obtain PHP-Nuke administrator access. I've tested my patch the past couple days both here and at all the other sites with success. Its a quite simple patch in fact, here it is...
click here to see the code
This patch must be applied at the beginning of your admin.php code in order to be effective. It will also be implemented at our CVS site: cvs.nukecops.com tomorrow.
CVS file updated, code moved to a forum post as Nuke's filtering messes it if posted here.
|
|