14 matches found
EUVD-2007-5744
Malware in sbrugna...
EUVD-2005-4444
Malware in sbrugna...
EUVD-2005-2816
Malware in sbrugna...
EUVD-2005-2541
Malware in sbrugna...
EUVD-2005-0268
Malware in sbrugna...
EUVD-2007-5090
Malware in sbrugna...
EUVD-2005-1895
Malware in sbrugna...
FlatNuke 2.5.5 structure.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities t...
CVE-2005-4208
CVE-2005-4208 affects FlatNuke 2.5.6 (and potentially earlier 2.5.x) where an attacker can trigger a directory traversal via the id parameter to the read/index.php script, enabling remote arbitrary file access (dot dot and null byte %00). The issue stems from improper sanitization of user input, ...
flat256enENa2.txt
Flatnuke 2.5.6 enENa2 possibly prior versions user IP address / information disclosure software: site: http://flatnuke.sourceforge.net/flatnuke/ download link: http://itk.hopto.org:666/work/index.php?mod=Download&dlfile=FlatNukeEn/FlatNukeEn2.5.6a2.zip&mode=go same vuln of simple machine forum,...
CVE-2005-0267
index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and 10 in the urlavatar field, which is interpreted as a sensitive directive...
CVE-2005-0268
Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the urlavatar field...
FlatNuke index.php url_avatar Field Arbitrary PHP Code Execution
The remote host is running FlatNuke, a content management system written in PHP and using flat files rather than a database for its storage. The remote version of this software has a form submission vulnerability that may allow an attacker to execute arbitrary PHP commands on the remote host...
FlatNuke < 2.5.2 Form Submission Arbitrary Script Injection
Binary data 2483.prm...