SQL injection
Several security holes have been discovered in PHP-Nuke, including SQL injection via unchecked PHP code. PHP-Nuke may have issues with some search engine indexes. PHP-Nuke does not use simple URLs or unique titles for pages.