Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files via .. sequences and %00 (trailing null byte) characters in the id parameter to the read mod in index.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flatnuke | Flatnuke | 2.5.6 (including) | 2.5.6 (including) |