Sploitus

23 exploited vulnerabilities in Flatnuke

Vulnerabilities with publicly known exploits

Vendors
Flatnuke
With known exploits
23
Affected Flatnuke versions
= 2.5.6, 2.5.3, 2.5.1, 2.5.5, 2.5.7, 1.0, 1.5, 1.6, 1.7, 1.8, 2.0
Affected flatnuke3 versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 15 of these already have exploit code on Sploitus

CVE-2005-4448
CVSS 10.0 HIGH 2005-12-21FIX AVAILABLE
CVE-2007-5771 1 exploit
CVSS 7.5 HIGH 2007-11-01FIX AVAILABLE
Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation
CVE-2005-1894 1 exploit
CVSS 7.5 HIGH 2005-06-08
FlatNuke 2.5.x - 'referer.php' Crafted Referer Arbitrary PHP Code Execution
CVE-2005-0267
CVSS 7.5 HIGH 2005-02-10FIX AVAILABLE
CVE-2005-2815
CVSS 6.4 MEDIUM 2005-09-07FIX AVAILABLE
CVE-2005-1892
CVSS 6.4 MEDIUM 2005-06-08
CVE-2007-5772 1 exploit
CVSS 6.0 MEDIUM 2007-11-01
Flatnuke 3 - Remote Cookie Manipulation / Privilege Escalation
CVE-2007-5774 1 exploit
CVSS 5.0 MEDIUM 2007-11-01FIX AVAILABLE
Flatnuke 3 - Remote Command Execution / Privilege Escalation
CVE-2005-4208 2 exploits
CVSS 5.0 MEDIUM 2005-12-13
Flatnuke 2.5.6 - Privilege Escalation / Remote Command ExecutionFlatnuke 2.5.5 - Remote Code Execution
CVE-2005-3307 1 exploit
CVSS 5.0 MEDIUM 2005-10-25FIX AVAILABLE
FlatNuke 2.5.x - 'index.php' Multiple Remote File Inclusions
CVE-2005-2813 1 exploit
CVSS 5.0 MEDIUM 2005-09-07FIX AVAILABLE
FlatNuke 2.5.6 - 'ID' Directory Traversal
CVE-2005-2540 1 exploit
CVSS 5.0 MEDIUM 2005-08-10FIX AVAILABLE
Flatnuke 2.5.5 - Remote Code Execution
CVE-2005-2538
CVSS 5.0 MEDIUM 2005-08-10
CVE-2005-2537
CVSS 5.0 MEDIUM 2005-08-10FIX AVAILABLE
CVE-2005-1896
CVSS 5.0 MEDIUM 2005-06-08FIX AVAILABLE
CVE-2005-1893 1 exploit
CVSS 5.0 MEDIUM 2005-06-08
FlatNuke 2.5.x - 'index.php?where' Full Path Disclosure
CVE-2006-3608 1 exploit
CVSS 4.6 MEDIUM 2006-07-14FIX AVAILABLE
FlatNuke 2.5.7 - 'index.php' Remote File Inclusion
CVE-2007-5773 1 exploit
CVSS 4.3 MEDIUM 2007-11-01FIX AVAILABLE
Flatnuke 3 - Remote Command Execution / Privilege Escalation
CVE-2005-3306
CVSS 4.3 MEDIUM 2005-10-25FIX AVAILABLE
CVE-2005-2814 1 exploit
CVSS 4.3 MEDIUM 2005-09-07
FlatNuke 2.5.6 - 'USR' Cross-Site Scripting
CVE-2005-2539 2 exploits
CVSS 4.3 MEDIUM 2005-08-10FIX AVAILABLE
FlatNuke 2.5.5 - 'structure.php' Multiple Cross-Site Scripting VulnerabilitiesFlatNuke 2.5.5 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-1895 1 exploit
CVSS 4.3 MEDIUM 2005-06-08FIX AVAILABLE
FlatNuke 2.5.x - 'help.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2005-4449 1 exploit
CVSS 4.0 MEDIUM 2005-12-21FIX AVAILABLE
Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution