| Package | Affected versions | Patched versions |
|---|---|---|
| flatnuke | ≤ 2.5.3 |
FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free