In a new security advisory posted late yesterday, Secunia has a few new issues with PHP-Nuke (v6.x and v7.x):

• If error messages hasn't been turned off in PHP, the "Downloads" module will return error messages if an invalid value is supplied to the "show" parameter. This can be exploited to reveal the installation path.
• Input passed to the "ttitle" and "sid" parameters in the "Downloads" module isn't properly verified before it is returned to the user. This can be exploited to execute arbitrary HTML or script code in a user's browser session in context of an affected site by tricking the user into visiting a malicious website or follow a specially crafted link.
• Input passed to the "orderby" and "sid" parameters in the "Downloads" module isn't properly verified before it is used in an SQL insert query. This can be exploited by malicious people to manipulate SQL queries by injecting arbitrary SQL code.

My personal favorite - the solution: Use another product. Somehow, I think most of the PHP community could have told you that...

Thanks to PHPMagazine for the link.