SECUNIA ADVISORY ID: SA28630

VERIFY ADVISORY: http://secunia.com/advisories/28630/

CRITICAL: Less critical

IMPACT: Cross Site Scripting, Manipulation of data

SOFTWARE: phpBB 2.x - http://secunia.com/product/463/



DESCRIPTION: NBBN has discovered a vulnerability in phpBB, which can be exploited by malicious people to conduct cross-site request forgery attacks. The vulnerability is confirmed in version 2.0.22. Other versions may also be affected.
 Read More...

Note: 

Montego added: Evaders has tested and released a fix for phpBB 2.0.22 and BBToNuke 2.0.22 See: http://evaders.swrebellion.com/forums/postt96.html

SECUNIA ADVISORY ID: SA28646

VERIFY ADVISORY: http://secunia.com/advisories/28646/

CRITICAL: Moderately critical

IMPACT: Exposure of system information, Exposure of sensitive information

SOFTWARE: Seagull PHP Framework 0.x - http://secunia.com/product/5387/

DESCRIPTION: fuzion has discovered a vulnerability in Seagull PHP Framework, which can be exploited by malicious people to disclose sensitive information.
 Read More...

In a forum thread from July 8, 2006, .htaccess maker, a utility was pointed out that didn't seem to generate much excitement at the time. However, there was recent activity that brought it to our attention again :). I have grabbed the code, cleaned up the errors, made the code XHTML compliant, and created a module for nuke. It is active for registered members at HtAccesser. Once I have some feedback on it to ensure that the original logic and modifications are working correctly I will package it up and release it for download.

Please post all feedback in the HtAccesser Forum.

Nuke-Design writes:  

Our New Shop Is Open!

Over 25 Themes Available, From Evo to Regular Nuke And More! Easy Usage, When You Purchase A Theme. Direct Download From Your Account In The Shop. Staff Themes, DesignWicked Themes and Easy View Screenshot Preview. Much More Efficient. Period.

www.designwicked.com

SECUNIA ADVISORY ID: SA28624

VERIFY ADVISORY: http://secunia.com/advisories/28624/

CRITICAL: Moderately critical

IMPACT: Manipulation of data, Exposure of sensitive information

SOFTWARE: PHP-Nuke 8.x - http://secunia.com/product/13524/

DESCRIPTION: Foster & 1dt.w0lf have discovered a vulnerability in PHP-Nuke, which can be exploited by malicious people to conduct SQL injection attacks. The vulnerability is confirmed in version 8.0. Other versions may also be affected.
 Read More...

nukeevangelist writes:  

*Nuke is literally a global network of developers, coders, supporters, users, friends..
the global group bridges time, distance, cultural-gaps. Bridging in a true sense: We connect people in Israel with those in Kairo, Russia, France, Norway .... and we bridge cultural gaps .. connecting friends all over the world. Get on board and celebrate the never ending success story.

The *Nuke development: Sustainable development is a collection of methods to create and sustain development :: *Nuke is literally a global network of developers, coders, supporters, users, friends..
 Read More...