FlatNuke 2.5.5 footer.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities t...

CVE-2005-2539

Multiple cross-site scripting XSS vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the 1 bodycolor, 2 backimage, 3 theme, or 4 logo parameter to structure.php, 5 admin, 6 adminmail, or 7 back parameter to footer.php,...

CVE-2005-2538

FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via 1 a null byte or 2 an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1 in the mod parameter...

Flatnuke <= 2.5.5 Remote Code Execution

Exploit for unknown platform in category web applications ======================================= Flatnuke FlatNuke 2.5.5 remote commands execution FlatNuke 2.5.5 possibly prior versions remote commands execution a script by rgod at http://rgod.altervista.org form name="form1" method="post"...

FlatNuke 2.5.5 - &#039;footer.php&#039; Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to inject html and script code into...