| VID |
21252 |
| Severity |
40 |
| Port |
80, ... |
| Protocol |
TCP |
| Class |
CGI |
| Detailed Description |
The PHP-Nuke is installed on the Web server. PHP-Nuke is an open-source program for creating and managing news-based Web sites created by Francisco Burzi.
In this package lots of security vulnerabilities have been reported continuously. The author of PHP-Nuke, Francisco Burzi even started to rewrite the program to remove the huge number of vulnerabilities, as described below:
http://www.phpnuke.org/modules.php?name=News&file=article&sid=5640
* Platforms Affected:
UNIX/Linux Any version
Windows Any version |
| Recommendation |
Recommend that de-install this package and use another solution or package. |
| Related URL |
CVE-2001-0292,CVE-2001-0320,CVE-2001-0854,CVE-2001-0911,CVE-2001-1025,CVE-2002-0206,CVE-2002-0483,CVE-2002-1242 (CVE) |
| Related URL |
6446,6465,6503,6750,6887,6890,7031,7060,7078,7079 (SecurityFocus) |
| Related URL |
6511,6183,7478,7596,6945,8618,10516 (ISS) |
|
