CVE-2005-1892

FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message.

• CWE-425

• http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256Product
• http://secunia.com/advisories/15603Broken Link
• http://securitytracker.com/id?1014114Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://secwatch.org/advisories/secwatch/20050604_flatnuke.txtBroken Link, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2005/0697Broken Link
• http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256Product
• http://secunia.com/advisories/15603Broken Link
• http://securitytracker.com/id?1014114Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://secwatch.org/advisories/secwatch/20050604_flatnuke.txtBroken Link, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2005/0697Broken Link

Published

Jun 9, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1886Cross-site scripting (XSS) vulnerability in view.php in YaPi…
• CVE-2005-1887Unknown vulnerability in the Sun Solaris C library (libc and…
• CVE-2005-1888Cross-site scripting (XSS) vulnerability in MediaWiki before…
• CVE-2005-1889Unknown vulnerability in Sun ONE Application Server 6.5 SP1 …
• CVE-2005-1890Unknown vulnerability in Mortiforo before 0.9.1 allows users…
• CVE-2005-1891The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM…7.5
• CVE-2005-1893FlatNuke 2.5.3 allows remote attackers to obtain sensitive i…
• CVE-2005-1894Direct code injection vulnerability in FlatNuke 2.5.3 allows…
• CVE-2005-1895Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 a…
• CVE-2005-1896Directory traversal vulnerability in thumb.php in FlatNuke 2…
• CVE-2005-1897Unknown vulnerability in FlexCast Audio Video Streaming Serv…
• CVE-2005-1898The passthrough functionality in phpThumb.php in phpThumb() …