https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 07:40:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-136912 EUVD-2026-136912 https://cve.radiocsirt.org/vuln/euvd-2026-136912 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5109 <p>Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.</p> <p>Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5109 https://cve.radiocsirt.org/vuln/ghsa-j47m-m564-x4jv <p>Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.</p> <p>Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.</p> https://cve.radiocsirt.org/vuln/ghsa-j47m-m564-x4jv https://cve.radiocsirt.org/vuln/gsd-2007-5109 gsd-2007-5109 https://cve.radiocsirt.org/vuln/gsd-2007-5109 https://cve.radiocsirt.org/vuln/ubuntu-cve-2007-5109 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: flatnuke, Ubuntu:18.04:LTS: flatnuke, Ubuntu:20.04:LTS: flatnuke, Ubuntu:22.04:LTS: flatnuke, Ubuntu:24.04:LTS: flatnuke, Ubuntu:25.10: flatnuke, Ubuntu:26.04:LTS: flatnuke</p> <p>Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: flatnuke, Ubuntu:18.04:LTS: flatnuke, Ubuntu:20.04:LTS: flatnuke, Ubuntu:22.04:LTS: flatnuke, Ubuntu:24.04:LTS: flatnuke, Ubuntu:25.10: flatnuke, Ubuntu:26.04:LTS: flatnuke</p> <p>Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2007-5109