EIP-2026-107131

PRE-CVE

Flatnuke3 File Manager Module - Unauthorized Access

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107131. PoCs published by KiNgOfThEwOrLd.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Flatnuke3, allowing unauthorized access to the File Manager module. It includes examples for full path disclosure, file replacement, and viewing/editing user credentials or arbitrary files on the server.

Description

Flatnuke3 File Manager Module - Unauthorized Access

Exploits (1)

exploitdb WORKING POC VERIFIED

by KiNgOfThEwOrLd · textwebappsphp

https://www.exploit-db.com/exploits/30698

View Code ZIP pw:eip

This exploit demonstrates an authentication bypass vulnerability in Flatnuke3, allowing unauthorized access to the File Manager module. It includes examples for full path disclosure, file replacement, and viewing/editing user credentials or arbitrary files on the server.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Flatnuke3-2007-10-10

No auth needed

Prerequisites: Access to the target Flatnuke3 instance

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1105 - Ingress Tool Transfer

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026