Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107130. PoCs published by StAkeR.
AI-analyzed exploit summary This Perl script exploits a privilege escalation vulnerability in Flatnuke <= 2.7.1 by manipulating the 'level' POST parameter with a null byte to elevate a user's privileges to administrator. It uses LWP::UserAgent to send a crafted HTTP request and verifies success by checking for admin-level access.
Description
Flatnuke 2.7.1 - 'level' Privilege Escalation
Exploits (1)
This Perl script exploits a privilege escalation vulnerability in Flatnuke <= 2.7.1 by manipulating the 'level' POST parameter with a null byte to elevate a user's privileges to administrator. It uses LWP::UserAgent to send a crafted HTTP request and verifies success by checking for admin-level access.