CVE-2005-4449

CVE-2005-4449 describes a vulnerability in FlatNuke 2.5.6 where an authenticated administrator can modify arbitrary PHP files by injecting code into the 'body' parameter of 'verify.php'. This allows for potential privilege escalation or remote command execution, as demonstrated by an ExploitDB entry. The CVSS score of 4.0 indicates a medium severity, with low attack complexity and partial integrity impact, though its classification as a vulnerability is conditional on whether administrators are normally expected to modify arbitrary content. While there is an ExploitDB entry, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.