Filtered by vendor Flatnuke Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-4208 1 Flatnuke 1 Flatnuke 2025-04-03 N/A
Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot) and null byte (%00) in the id parameter of the read module.
CVE-2005-4448 1 Flatnuke 1 Flatnuke 2025-04-03 N/A
FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie.