Unrated
flatnuke — security advisory
Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.
- Products
- flatnuke
- Affected versions
- 2.7.2-0ubuntu2, 2.7.2-0ubuntu3, 2.7.2-0ubuntu5, 2.7.2-0ubuntu6
- Fixed versions
- Not specified
- CVEs
- CVE-2007-5109
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:19 UTC · Revision 1
Source evidence
Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.
osv:UBUNTU-CVE-2007-5109
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
flatnuke
Fixed versions: Not specified
Complete source record
{
"id": "729373ffb2e2f8a3da1ec70807f94b678fef92fde14dc35c84ab2efe527f192f",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2007-5109",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2007-5109",
"summary": "Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.",
"evidence": "osv:UBUNTU-CVE-2007-5109",
"products": [
{
"name": {
"value": "flatnuke",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "2.7.2-0ubuntu3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu3",
"evidence": "/affected/4/versions"
},
{
"value": "2.7.2-0ubuntu5",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu5",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu6",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "flatnuke",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.7.2-0ubuntu5",
"evidence": "/affected/7/versions"
},
{
"value": "2.7.2-0ubuntu6",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "UBUNTU-CVE-2007-5109",
"aliases": [
"UBUNTU-CVE-2007-5109"
],
"metrics": [
{
"type": "Ubuntu",
"score": "low"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"2.7.2-0ubuntu2",
"2.7.2-0ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"2.7.2-0ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"2.7.2-0ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.7.2-0ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.7.2-0ubuntu3",
"2.7.2-0ubuntu5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.7.2-0ubuntu5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu5"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.7.2-0ubuntu6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "flatnuke",
"purl": "pkg:deb/ubuntu/flatnuke?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.7.2-0ubuntu5",
"2.7.2-0ubuntu6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-5109.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "flatnuke",
"binary_version": "2.7.2-0ubuntu6"
}
]
}
}
],
"modified": "2026-10-17T12:52:37.405582442Z",
"provider": "osv",
"upstream": [
"CVE-2007-5109"
],
"references": [
"https://ubuntu.com/security/CVE-2007-5109",
"https://www.cve.org/CVERecord?id=CVE-2007-5109"
]
},
"related_cves": [
{
"value": "CVE-2007-5109",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 353251,
"published_at": "2007-09-26T23:17:00+00:00"
}