191 matches found
CVE-2005-2538
CVE-2005-2538 affects FlatNuke 2.5.5 and potentially earlier versions. The vulnerability allows remote attackers to obtain sensitive information via the mod parameter when it contains either a null byte or an MS-DOS device name (AUX, CON, PRN, COM1, LPT1). This is an information disclosure issue ...
CVE-2005-2537
Concrete details found: FlatNuke (PHP CMS using flat files) 2.5.5 and earlier is affected by CVE-2005-2537, where a direct request to structure.php can cause sensitive information disclosure. Related connected data also notes multiple remote vulnerabilities in FlatNuke
CVE-2005-2537
FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php...
CVE-2005-2539
Multiple cross-site scripting XSS vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the 1 bodycolor, 2 backimage, 3 theme, or 4 logo parameter to structure.php, 5 admin, 6 adminmail, or 7 back parameter to footer.php,...
CVE-2005-2540
CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via an ASCII char 13 carriage return in the signature field, which is injected into a PHP script without a preceding comment character, which can then be executed...
CVE-2005-2538
FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via 1 a null byte or 2 an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1 in the mod parameter...
CVE-2005-2537
FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php...
CVE-2005-2539
CVE-2005-2539 affects FlatNuke CMS (2.5.5 and possibly earlier). Several XSS vulnerabilities allow remote attackers to inject arbitrary script/HTML through: (1) structure.php parameters — bodycolor, backimage, theme, logo; (2) footer.php parameters — admin, admin_mail, back; (3) the message body ...
FlatNuke < 2.5.6 Multiple XSS
Binary data 3157.prm...
Flatnuke <= 2.5.5 Remote Code Execution
Exploit for unknown platform in category web applications ======================================= Flatnuke FlatNuke 2.5.5 remote commands execution FlatNuke 2.5.5 possibly prior versions remote commands execution a script by rgod at http://rgod.altervista.org form name="form1" method="post"...
FlatNuke < 2.5.6 Multiple Remote Vulnerabilities
The remote host is running FlatNuke, a content management system written in PHP that uses flat files rather than a database for its storage. The version of FlatNuke installed on the remote host suffers from several flaws: - Arbitrary PHP Code Execution Vulnerability The application fails to remov...
Flatnuke 2.5.5 - Remote Code Execution
FlatNuke 2.5.5 remote commands execution FlatNuke 2.5.5 possibly prior versions remote commands execution a script by rgod at http://rgod.altervista.org hostname ex: www.sitename.com...
Flatnuke <= 2.5.5 Remote Code Execution
No description provided by source. ?php / Aug 2005, 4th Flatnuke 2.5.5 possibly prior versions remote code execution by rgod site: http://rgod.altervista.org thanks to UlisseHacker... : make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on...
Flatnuke 2.5.5 - Remote Code Execution
Flatnuke 2.5.5 - Remote Code Execution FlatNuke 2.5.5 remote commands execution FlatNuke 2.5.5 possibly prior versions remote commands execution a script by rgod at http://rgod.altervista.org hostname ex: www...
FlatNuke 2.5.5 (possibly prior versions) remote commands execution / cross site scripting / path disclosure (by rgod)
0.34 2005-08-05 FlatNuke 2.5.5 possibly prior versions remote commands execution / cross site scripting / path disclosure by rgod release date: 2005-07-20 software: author site: http://flatnuke.sourceforge.net/ path disclosure: http://target/path/themes/butterfly/structure.php supllying a null by...
FlatNuke 2.5.5 - 'structure.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to inject html and script code into...
FlatNuke 2.5.5 - footer.php Multiple Cross-Site Scripting Vulnerabilities
FlatNuke 2.5.5 - footer.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
[SA16330] Flatnuke Multiple Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
FlatNuke 2.5.5 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14483/info FlatNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to inject html and script code into...