New alert in Neworder

Nuke Cadet Joined: Feb 14, 2003 Posts: 6 Location: Brazil

Hello all...
look at this:
PHP-Nuke 6.0 (& 6.5?) : Serious SQL Injection Security Holes
Mar, 07 2003 - 04:49
contributed by: hx

I test many of this in my website and dont work..
Any of this hack work in 6.0? or this a false alert...

the complete report :
http://neworder.box.sk/showme.php3?id=7746
and in:
http://www.phpsecure.info

73 to all

Joined: Jan 31, 2004 Posts: -88

we've seen this b4. Most of it is a load of c***

Check the other topic about it.

AI

Major Joined: Jan 13, 2003 Posts: 892

I think the main thing is to be sure magic_quotes_gpc=ON

I haven't made any testing to verify the problems. If someone does I would like to hear from them.

Nuke Cops Founder Joined: Nov 14, 2002 Posts: 5939

Yeah I tested with it On:

http://www.computercops.biz/postlite2543-.html

Some folks have a problem with it tho...

Premium Joined: Feb 11, 2003 Posts: 172 Location: USA

i have it set to on as well.

i noticed now i am unable to loggout from the admin area (nuke6)

however, regulars user accounts can log in and out.

Nuke Cops Founder Joined: Nov 14, 2002 Posts: 5939

Just because you have it On you can't log out of admin?