FlatNuke print.php news Variable MS-DOS Device Request Path Disclosure

2005-08-30T10:35:31
ID OSVDB:19115
Type osvdb
Reporter OSVDB
Modified 2005-08-30T10:35:31

Description

Manual Testing Notes

http://[target]/[path]/print.php?news=com1%00&mod=whatever

References:

Vendor URL: http://flatnuke.sourceforge.net/flatnuke/ Security Tracker: 1014824 Secunia Advisory ID:16650 Related OSVDB ID: 19116 Related OSVDB ID: 19118 Related OSVDB ID: 19117 Related OSVDB ID: 19114 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-08/0442.html ISS X-Force ID: 22153 CVE-2005-2815