Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Flatnuke Index.PHP目录遍历漏洞
Vulnerability Description
FlatNuke 2.5.6基于管理员名字和哈希化密码而非纯文本密码的MD5校验和来验证认证凭证， 攻击者因此可以通过获取哈希密码获取权限， 之后计算凭证并将其涵括于secid cookie中。
CVSS Information
N/A
Vulnerability Type
N/A