CVE-2005-4208

This exploit targets Flatnuke 2.5.5 by injecting malicious PHP code into the user registration process, creating a backdoor file that allows remote command execution. The script sends crafted HTTP requests to register a user with a malicious signature field containing PHP code.

This exploit targets a privilege escalation and remote command execution vulnerability in Flatnuke 2.5.6. It leverages a path traversal flaw to disclose admin credentials and then crafts an admin cookie to edit PHP files, enabling arbitrary command execution.