CVE-2005-4208
Flatnuke 2.5.6 - Directory Traversal via Read Module ID Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-4208. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets Flatnuke 2.5.5 by injecting malicious PHP code into the user registration process, creating a backdoor file that allows remote command execution. The script sends crafted HTTP requests to register a user with a malicious signature field containing PHP code.
Description
Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot) and null byte (%00) in the id parameter of the read module.
Exploits (2)
This exploit targets Flatnuke 2.5.5 by injecting malicious PHP code into the user registration process, creating a backdoor file that allows remote command execution. The script sends crafted HTTP requests to register a user with a malicious signature field containing PHP code.
This exploit targets a privilege escalation and remote command execution vulnerability in Flatnuke 2.5.6. It leverages a path traversal flaw to disclose admin credentials and then crafts an admin cookie to edit PHP files, enabling arbitrary command execution.