flatnux records

7 published records for vendor flatnux.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2012-4877Proof of concept	Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijaflatnux · flatnux · CWE-352 Pre-auth CSRF	Medium6.8	—	1.2%	Sep 6, 2012
23Monitor	CVE-2012-4878Proof of concept	Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files flatnux · flatnux · CWE-22 Pre-auth Path traversal	Medium5.0	—	8.8%	Sep 6, 2012
22Monitor	CVE-2009-0572Proof of concept	PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globaflatnux · flatnux · CWE-94 pre-auth RCE	Medium5.1	—	6.3%	Feb 13, 2009
18Monitor	CVE-2008-5761Proof of concept	Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary webflatnux · flatnux · CWE-79 Pre-auth XSS	Medium4.3	—	1.7%	Dec 30, 2008
17Monitor	CVE-2012-4890No exploit	Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web sflatnux · flatnux · CWE-79 Pre-auth XSS	Medium4.3	—	1.4%	Sep 10, 2012
17Monitor	CVE-2008-5759Proof of concept	Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script orflatnux · flatnux · CWE-79 Pre-auth XSS	Medium4.3	—	1.2%	Dec 30, 2008
17Monitor	CVE-2012-4892No exploit	Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web scrflatnux · flatnux · CWE-79 Pre-auth XSS	Medium4.3	—	1.1%	Sep 10, 2012

CVE-2012-4877
27Monitor
Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hija
MediumCVSS 6.8Proof of conceptEPSS 1%
- Pre-auth
- CSRF
flatnux · flatnuxSep 6, 2012
CVE-2012-4878
23Monitor
Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files
MediumCVSS 5.0Proof of conceptEPSS 9%
- Pre-auth
- Path traversal
flatnux · flatnuxSep 6, 2012
CVE-2009-0572
22Monitor
PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globa
MediumCVSS 5.1Proof of conceptEPSS 6%
- pre-auth RCE
flatnux · flatnuxFeb 13, 2009
CVE-2008-5761
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web
MediumCVSS 4.3Proof of conceptEPSS 2%
- Pre-auth
- XSS
flatnux · flatnuxDec 30, 2008
CVE-2012-4890
17Monitor
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web s
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
flatnux · flatnuxSep 10, 2012
CVE-2008-5759
17Monitor
Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script or
MediumCVSS 4.3Proof of conceptEPSS 1%
- Pre-auth
- XSS
flatnux · flatnuxDec 30, 2008
CVE-2012-4892
17Monitor
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web scr
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
flatnux · flatnuxSep 10, 2012