PT-2007-6741 · Flatnuke · Flatnuke

Kingoftheworld · Publicado 2007-11-01 · Atualizado 2017-09-29 · CVE-2007-5774

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Flatnuke version 3

Description The issue allows remote attackers to obtain sensitive information. This is achieved by providing an invalid argumentname parameter in a disc op action to the index.php file in the File Manager module, which results in the path being revealed in an error message.

Recommendations For Flatnuke version 3, consider restricting access to the index.php file in the File Manager module until a patch is available. As a temporary workaround, avoid using the argumentname parameter in the affected disc op action to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-5774

Produtos afetados

Flatnuke

Referências · 4

• 🔥 https://exploit-db.com/exploits/4561 · Exploit
• http://osvdb.org/43120 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5774 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37404 · Nota