NukeEvangelist writes:  

Mike Agar, on jmagar.com came up with a brandnew release [ 09/02/06 released ]

travel over to jmagar.com and get the fresh code!!

I've hurried a new release to market in order to get a small security hole plugged. All older versions of MyHeadlines are subject to XSS
I was half way through some performance improvements that are also included in this release. "Make it work, then Make it fast." It's been 6 years of making it work... time to make it fast! (and a bit more secure)

MyHeadlines is an RSS reader that caches content from many sources and provides Full Text search capabilities. The emergent behaviour is an efficient Current Events Search Engine. Using MyHeadlines each user has the ability to subscribe to the news feeds that interest them the most. There's screen scraping technology for building custom feeds, and for harvesting Stock Ticker data. Blogging, Link Dump, and Comments are features included in the standard download. If you have a PHP and MySQL based web architecture then MyHeadlines is the Content Syndication Engine for You!

Download MyHeadlines Today - travel over to jmagar.com - and get the fresh code - support the sustainable development "

TITLE: PHP-Nuke MyHeadlines Module "myh_op" Cross-Site Scripting

SECUNIA ADVISORY ID: SA21653

VERIFY ADVISORY: http://secunia.com/advisories/21653/

CRITICAL: Less critical

IMPACT: Cross Site Scripting

WHERE: >From remote

SOFTWARE: MyHeadlines 4.x (module for PHP-Nuke)- http://secunia.com/product/11722/

DESCRIPTION: Thomas Pollet has discovered a vulnerability in the MyHeadlines module for PHP-Nuke, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the "myh_op" parameter in modules.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Example: http://[host]/modules.php?op=modload&name=MyHeadlines&file=index&myh=user&myh_op=show_all[code]&eid=2474

The vulnerability has been confirmed in version 4.3.1. Other versions may also be affected.

SOLUTION: Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY: Thomas Pollet

pnclthnmstsh writes:  

This is a huge thank you to all of the members at FZ as well as all of the coders all over the world that have created open source scripts to share with all of us in the Nuke community to keep our sites going and growing!

We work hard 21 and a half hours a day to keep FZ at a semi stable level but always secure and fun.

Our contributors have also led us to expand out to a gaming site at Total Online Play and our latest addition is soon to be (hopefully) a very powerful dating site at Total Online Dating.

Once again...Thank you all so much for all the scripts and all the support to help us reach the level of 1400 games as well as all the other stuff FZ has to offer for free!

Sincerely...PTM ( TOP FunZone )

STALKERllllllD writes:  

Just Released!!
N4G-WoWJoinUs Module is a great custom join form made just for "World Of Warcraft" That has questions that need asking for WoW Guilds. Module comes with Horde & Alliance Versions so please drop by Nuke4Gamers and download yours now.

nukeevangelist writes:  

nukeSeo.com - this site is s new service-site for PHPNuke : celebrate this - travel over - nukeseo.org - a great site with many services for PHPNuke. - travel over to nukeseo.org

the developers work on many projects - they need your ideas - suggestions now.

nukeSEO includes several advanced tools and services designed to improve the search engine placement of PHP-Nuke sites and to make PHPNuke SEO friendly. This PHP-Nuke add-on provides a methodical approach similar to offline commercial tools like WebCEO (for free, of course!) and includes these functions:

Review and validate your robots.txt file
Research keywords, including keyword relevancy, keyword density, "suggest keywords" /
similar keywords function via Wordtracker and Overture, and competitive analysis by keyword
Maintain your meta tags
Generate and submit Google site maps (sitemap.xml)
Submit your site to major search engines
Monitor results, including keyword ranking / position (SERP), search engine saturation, link popularity, and (tentatively) Alexa traffic ranking

nukeevangelist writes:  

Travel over to PCNuke.com -

some days ago we announced the Hot or Not module - available at PCNuke.com see some demos there.

You can run this module in order to show all things you like

- people
- cars
- hotels
- bikes
- everything else - You just have to create a folder and then you can insert data, pictures and all the
necessary....

and feedback here at PCNuke.com