phpNuke webmail module

[mjp]

We will be making changes to the web servers very soon to prevent the use of phpNuke's webmail module. This is necessary due to the frequent exploitation of this insecure module by spammers.

phpNuke is aware of the vulnerability of this module, and actually removed it from some releases of their package, but they have recently re-added it, and we continue to experience problems with it.

When we have completed the necessary changes, users attempting to send messages through any phpNuke webmail module will encounter server errors.

The vulnerabilities of the phpNuke webmail module have been directly responsible for the blacklisting of several of our web servers by major ISPs. The interruptions, inconvenience and attention necessary to resolve these issues is considerable, and has made the disabling of the phpNuke webmail module necessary.