Two input validation errors have been identified in PHP-Nuke, which allows a malicious person to gain knowledge of sensitive information by conducting a SQL injection attack.

Both vulnerabilities can be exploited to manipulate existing SQL queries, which can result in disclosure of the Admin user's password hash. This can afterwards be used to gain administrative priviliges for PHP-Nuke.

The first bug is in the included search engine and the second bug is in the "admin" cookie variable.

Solution
No update is currently available.
Further details available to Secunia VIM customers

Provided and/or discovered by
David Zentner

Original Advisory
http://www.cgishield.com/?target=advisory&id=7

Deep Links
Links available to Secunia VIM customers