CVE

Id
15653  
CVE No.
CVE-2005-4449  
Status
Candidate  
Description
verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability.  
Phase
Assigned (20051221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
122770 15653 CVE-2005-4449 BUGTRAQ:20051210 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit  View
122771 15653 CVE-2005-4449 URL:http://www.securityfocus.com/archive/1/419107  View
122772 15653 CVE-2005-4449 MISC:http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup  View
122773 15653 CVE-2005-4449 SECTRACK:1015339  View
122774 15653 CVE-2005-4449 URL:http://securitytracker.com/id?1015339  View
122775 15653 CVE-2005-4449 SREASON:248  View
122776 15653 CVE-2005-4449 URL:http://securityreason.com/securityalert/248  View
122777 15653 CVE-2005-4449 XF:flatnuke-multiple-obtain-information(22159)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62542 JVNDB-2005-000744 HP-UX の Software Distributor におけるセキュリティ制限を回避される脆弱性 HP-UX で稼動する Software Distributor (SD) には、セキュリティ制限を回避される脆弱性が存在します。 CVE-2005-4451 15653 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000744.html  View