CVE-2009-0572
published 2009-02-13CVE-2009-0572: PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and…
PriorityP338medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EXPLOIT
EPSS
6.34%
92.8th percentile
PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the _FNROOTPATH parameter to (1) index.php and (2) filemanager.php.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| flatnux | flatnux | — | — |
| flatnux | flatnux | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/51728http://osvdb.org/51729http://secunia.com/advisories/33721http://www.securityfocus.com/archive/1/500663/100/0/threadedhttp://www.securityfocus.com/bid/33599https://exchange.xforce.ibmcloud.com/vulnerabilities/48491https://www.exploit-db.com/exploits/7969http://osvdb.org/51728http://osvdb.org/51729http://secunia.com/advisories/33721http://www.securityfocus.com/archive/1/500663/100/0/threadedhttp://www.securityfocus.com/bid/33599https://exchange.xforce.ibmcloud.com/vulnerabilities/48491https://www.exploit-db.com/exploits/7969
2009-02-13
Published