Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Flatnuke3 Component: Flatnuke3 Clear all filters
TI-2007-05539 CVE-2007-5773 · GHSA-3vv6-wvwg-f6r4

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module…

Priority LOW 22

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00876 Published 2007-11-01 No fix listed CWE-352
TI-2007-05538 CVE-2007-5772 · GHSA-g4p4-g8hm-9prr

Direct static code injection vulnerability in the download module in Flatnuke 3 allows…

Priority LOW 33

Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by sav…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.03831 Published 2007-11-01 No fix listed CWE-94