CVEブラウザに戻る

CVE-2007-5771

HIGH

7.5

CVSS Severity Score

EPSS Score0.1960%

EPSS Percentile6.30th

Published2007年11月1日

Last Modified2026年4月23日

Vulnerability Description

Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.

Affected Platforms (CPE)

📦

Flatnuke3

Flatnuke3

All versions

References & Advisories

🔗 http://osvdb.org/43637

🔗 http://www.securityfocus.com/archive/1/482774/100/0/threaded

🔗 http://www.securityfocus.com/bid/26157

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/37385

🔗 https://www.exploit-db.com/exploits/4562

🔗 http://osvdb.org/43637

🔗 http://www.securityfocus.com/archive/1/482774/100/0/threaded

🔗 http://www.securityfocus.com/bid/26157

関連する脆弱性情報

CVE-2009-05725.1

PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when regi...

CVE-2008-57594.3

Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web...

CVE-2008-57614.3

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arb...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.