CVE-2007-5774
Flatnuke3 - Information Exposure via File Manager Invalid Argumentname Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-5774. PoCs published by KiNgOfThEwOrLd.
AI-analyzed exploit summary The document describes a remote command execution and privilege escalation vulnerability in Flatnuke 3's File Manager module. It explains how an attacker can exploit the vulnerability by manipulating file operations to edit user credentials or upload malicious scripts, and includes examples of exploit URLs and forms.
Description
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message.
Exploits (1)
The document describes a remote command execution and privilege escalation vulnerability in Flatnuke 3's File Manager module. It explains how an attacker can exploit the vulnerability by manipulating file operations to edit user credentials or upload malicious scripts, and includes examples of exploit URLs and forms.