New information from MustLive.

In addition to my previous post about vulnerabilities in myPHPNuke, here is information about new vulnerabilities in myPHPNuke.

New disclosures:

SQL Injection vulnerabilities in myPHPNuke

SQL Injection vulnerability in myPHPNuke

Multiple vulnerabilities in myPHPNuke

Administrators of all sites on myPHPNuke need to fix all these and previous vulnerabilities in this engine.

We like to welcome you on board again. On 18 December 2008, this website suddenly went offline due to some business issues where the company that hosted our website got involved in.

The myPHPNuke team is not in a position to comment on those issues as we are not connected to that company but we are very happy to announce that we are back again!

The site was hacked by MustLive. myPHPNuke developers and admins of this site need to attend to security. Fixing of all vulnerabilities in myPHPNuke is needed for administrators of all sites on this engine.

About security of myPHPNuke

I informed myPHPNuke developers many times about multiple vulnerabilities which I found in their web software. Here are my disclosures: http://websecurity.com.ua/2297/, http://websecurity.com.ua/2391/, http://websecurity.com.ua/2394/, http://websecurity.com.ua/2398/ (and there are many other holes). But without any response from them and any fixes of the holes, which is very irresponsible. So I hacked official site of myPHPNuke to draw your attention to security problems in this engine.