PHP Nuke 0-7 Double Hex Encoded Input Validation Vulnerability

ID SSV:79292
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


PHP Nuke is prone to an input validation vulnerability. Reports indicate the script fails to correctly identify potentially dangerous characters when the characters are double hex-encoded (i.e. %25%41 == %41 == A).

A remote attacker may exploit this issue to bypass PHP Nuke protections and exploit issues that exist in the underlying PHP Nuke installation. 

Will be filtered:

Will be bypassed:

Will be filtered:

Will be bypassed: