← back
CVE-2005-2813

CVE-2005-2813

EPSS 7.1%
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) characters in the id parameter to the read mod in index.php.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/26212unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://seclists.org/lists/bugtraq/2005/Aug/0440.htmlhttp://secunia.com/advisories/16650/http://securitytracker.com/id?1014824http://securitytracker.com/id?1015339http://www.securityfocus.com/archive/1/419107/100/0/threadedhttp://www.securityfocus.com/bid/14702http://www.securityfocus.com/bid/15796