CVE-2007-5773

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2007-11-01

Last modified

2024-08-07

Weaknesses

CWE-352

Affected products

• Flatnuke3 (Flatnuke3)

References

• http://osvdb.org/43635
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37413
• https://www.exploit-db.com/exploits/4561