CVE-2007-5773 - CVE House
Back to Database
Status published Medium CVE-2007-5773

Cross-site request forgery (CSRF) vulnerability in index.php in the File...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5773

Credits & Attribution

No credits recorded in the NVD database.

References

More from flatnuke3

View All →
CVE-2007-5774
index.php in the File Manager module in Flatnuke 3 allows...
Medium 5
CVE-2007-5772
Direct static code injection vulnerability in the download module in...
Medium 6
CVE-2007-5771
Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative...
High 7.5

Affected Vendor

Affected Software

flatnuke3
Vulnerable Versions:
Unknown

Timeline

Official Publish: November 1st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.