VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 21, 2005· Updated Jun 16, 2026

CVE-2005-4448

CVE-2005-4448

Description

FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Flatnuke/Flatnuke2 versions
    cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:flatnuke:flatnuke:2.5.6:*:*:*:*:*:*:*
    • (no CPE)range: =2.5.6

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.