PT-2005-2852 · Flatnuke · Flatnuke

Published 2005-06-08 · Updated 2011-03-08 · CVE-2005-1895

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FlatNuke version 2.5.3

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the border or back parameters to "help.php" or "footer.php" API endpoints.

Recommendations For FlatNuke version 2.5.3, update to a version that fixes this issue to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1895

Affected Products

Flatnuke

References · 7

• 🔥 https://exploit-db.com/exploits/25800 · Exploit
• http://secwatch.org/advisories/secwatch/20050604_flatnuke.txt · Vendor Advisory
• http://securitytracker.com/id?1014114 · Patch
• http://secunia.com/advisories/15603 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-1895 · Security Note
• http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256 · Note
• http://vupen.com/english/advisories/2005/0697 · Note