CVE-2005-3307

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via ".." sequences in the (1) user parameter in a profile operation or (2) quale parameter in a newtopic operation.

Published 2005-10-26. Last modified 2026-06-16.