PHP-Nuke 6.0 - 'modules.php' Denial of Service

Author: Ing. Bernardo Lopez
type: dos
platform: php
port: 
date_added: 2002-12-23  
date_updated: 2012-10-20  
verified: 1  
codes:   
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 22110.txt  
source: https://www.securityfocus.com/bid/6465/info

A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters.

An attacker can exploit this vulnerability by modifying certain parameters when making a request for the modules.php script. This will prevent visitors to the site hosting PHP-Nuke from creating a new account thereby leading to a denial of service vulnerability.

http://target.com/modules.php?name=Your_Account&op=userinfo&uname=