CVE-2005-1895

概要

参考情報

• flatnuke.sourceforge.net/index.php
• secunia.com/advisories/15603 · Patch
• securitytracker.com/id · Patch
• secwatch.org/advisories/secwatch/20050604_flatnuke.txt · Vendor Advisory
• vupen.com/english/advisories/2005/0697

flatnuke のその他の脆弱性

• CVE-2007-5109中 4.3Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password…
• CVE-2006-3608中 4.6The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of upload…
• CVE-2005-4449中 4.0verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an ar…
• CVE-2005-4448緊急 10.0FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaint…
• CVE-2005-4208中 5.0Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot) and null byte (%00)…