CVE-2005-0267: Flatnuke

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive.

Affected products

• Flatnuke Flatnuke: version 2.5.1 only

Published 2005-05-02. Last modified 2026-06-16.