Filtered by vendor Flatnuke Subscriptions
Filtered by product Flatnuke Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-3608 1 Flatnuke 1 Flatnuke 2025-04-03 N/A
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file.
CVE-2005-2813 1 Flatnuke 1 Flatnuke 2025-04-03 N/A
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) characters in the id parameter to the read mod in index.php.