medium5.0Public exploit code
CVE-2007-5774
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Flatnuke 3 - Remote Command Execution / Privilege Escalation2007-10-23 · webapps · php · Verified
Impact
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flatnuke3 | Flatnuke3 | All versions |