Once again, Secunia.com is reporting some bugs in PHP-Nuke that could allow malicious users to conduct cross-site scripting attacks, disclose path information, and cause a DoS (Denial of Service).

There are four ways discovered that could allow this to happen, including input validation errors (leading to SQL injections or the like) and the passing of invalid input to certain functions.

These vulnerabilities are an issue for PHP-Nuke versions 6.x and 7.x. It's not as critical as others, but can still be dangerous for anyone chosing to use this software. And, of course, their solution is always good for a laugh:

Solution: Use another product.