CVE-2007-5774 index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error...
MediumCVSS 5.0
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flatnuke3 | All versions | No fix listed |
References
- 43120 vdb-entry
- flatnuke3-index-path-disclosure(37404) vdb-entry
- 4561 exploit