PHP-Nuke Anti-CSRF Routine Bypass Vulnerability Wednesday, 28 March 2007Francesco `ascii` Ongaro and Stefano `wisec` di Paola have discovered a vulnerability in PHP-Nuke, which can be exploited by malicious people to conduct cross-site scripting or cross-site request forgery attacks.
read more... |
---|