23.3. Common PHP-Nuke security vulnerabilities

It's instructive to take the time and have a look at PHP-Nuke's list of vulnerabilities (see Table 23-1). Even a superficial inspection reveals some common vulnerability patterns:

• Cross-site scripting (Section 23.3.1)

• SQL injection (Section 23.3.2)

• Path disclosure (Section 23.3.3)

• Cross-site tracing (Section 23.3.4)

In the following we will examine them in more detail.