| Package | Affected versions | Patched versions |
|---|---|---|
| flatnuke | = 2.5.6 |
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) characters in the id parameter to the read mod in index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free