CVE-2005-4449

Published: Dec 21, 2005Modified: Apr 16, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability.

Affected (1)

Products: Flatnuke: Flatnuke

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flatnuke Flatnuke	Version 2.5.6

References (10)

http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup

Source: cve@mitre.org

http://securityreason.com/securityalert/248

Source: cve@mitre.org

http://securitytracker.com/id?1015339

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/419107

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/22159

Source: cve@mitre.org

http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/248

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015339

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/419107

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/22159

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.