← Back

Flatnuke

flatnuke

Vendor: Flatnuke • 21 CVEs

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Flatnuke
1Flatnuke
Apr 16, 2026
Jan 3, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field.