CVE-2005-3307

Remote attackers can exploit this vulnerability by sending crafted ".." sequences within the `user` parameter during a profile operation or the `quale` parameter during a newtopic operation. The application fails to validate these inputs, allowing an attacker to read arbitrary files on the server. The advisory notes that an attacker must be logged into the application to exploit these vulnerabilities [ref_id=2].

The vulnerability exists in the `index.php` script of FlatNuke. Specifically, the `user` parameter in profile operations and the `quale` parameter in newtopic operations are susceptible to directory traversal attacks due to insufficient input validation [ref_id=1, ref_id=2].

The advisory does not provide specific details on the patch or how it addresses the vulnerability. However, it indicates that the issue stems from a failure in the application to properly sanitize user-supplied input [ref_id=2]. Remediation guidance suggests updating to a patched version, though specific patch details are not available in the provided references.