Poisoned Cookie Hole

The PHP functions in *nix systems, FOPEN(), REQUIRE(), INCLUDE() are seriously vulnerable to the poison null byte, wherein they drop anything that happens to follow the null in the filename.

PHP nuke uses Base64 encoding for coding user info into a cookie, and fails to check for special characters while decoding with base64_decode().This lets anyone to change SQL query criteria and open a door to /etc/password/

The patch is at the source URL.