PT-2007-6741 · Flatnuke · Flatnuke

Kingoftheworld · Published 2007-11-01 · Updated 2017-09-29 · CVE-2007-5774

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Flatnuke version 3

Description The issue allows remote attackers to obtain sensitive information. This is achieved by providing an invalid argumentname parameter in a disc op action to the index.php file in the File Manager module, which results in the path being revealed in an error message.

Recommendations For Flatnuke version 3, consider restricting access to the index.php file in the File Manager module until a patch is available. As a temporary workaround, avoid using the argumentname parameter in the affected disc op action to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-5774

Affected Products

Flatnuke

References · 4

• 🔥 https://exploit-db.com/exploits/4561 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5774 · Security Note
• http://osvdb.org/43120 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37404 · Note