The PHP-NUKE Webmail Module has been extensively exploited by spammers on Layered Technologies Network and networks of other major providers to the point that even the author is removing it as explained at the following URL quote:
"WebMail module removed from all versions of PHP-Nuke"
"Security: This is a quick note to let you know that PHP-Nuke versions 6.0, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0 and 7.1 has been updated and the module
WebMail removed. This is because it gave me too many troubles due to an exploit on the module that some low budget spammers are using to
send spam. The hosting company of PHPNuke.org (EV1) requested me to take this action in order to finaly solve this issue. Also, if you're using
any of the mentioned versions you must remove /modules/WebMail/ folder immediately or replace your installed version with the updated version located in the downloads section of this site or just upgrade your installation to the latest version. Said this, I'm in peace now."
Therefore, Layered Technologies requires the PHP-NUKE Webmail Module be immediately uninstalled from all servers on our network. Any server with the webmail module installed on it found to be sending SPAM is subject to immediate disconnection without notice. All servers running Fantastico should verify they have uninstalled this module which is included as part of Fantastico.
This change has been brought on by a recent rash of abuse caused by spammers that are now using the webmail module for large scale spam campaigns and it appears they have also automated the exploit to the point where we are receiving a 100+ complaints per day.
If you require assistance in removing this module from your server please contact our support team ASAP and we can assist you.
For further details and comments please see our forums thread at:
Layered Technologies Abuse Team.