CVE-2005-4449

Published Dec 21, 2005

Last updated 7 years ago

Overview

Description: verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F59B925E-748F-4BC8-AF15-997CDAC9F9EE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References