CVE-2007-5773
Flatnuke 3 - Cross-Site Request Forgery via File Manager dir and ffile Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-5773. PoCs published by KiNgOfThEwOrLd.
AI-analyzed exploit summary The document describes a remote command execution and privilege escalation vulnerability in Flatnuke 3's File Manager module. It explains how an attacker can exploit the vulnerability by manipulating file operations to edit user credentials or upload malicious scripts, and includes examples of exploit URLs and forms.
Description
Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter.
Exploits (1)
The document describes a remote command execution and privilege escalation vulnerability in Flatnuke 3's File Manager module. It explains how an attacker can exploit the vulnerability by manipulating file operations to edit user credentials or upload malicious scripts, and includes examples of exploit URLs and forms.