CVE-2007-5774

CVE-2007-5774 describes an information disclosure vulnerability in the File Manager module of Flatnuke 3. Remote attackers can exploit an invalid argumentname parameter in a 'disc op' action within index.php to trigger an error message revealing the full path of the application. This vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, leading to a partial confidentiality impact by exposing sensitive system information. While not actively exploited in the wild (not in KEV), an ExploitDB entry (EDB-4561) suggests potential for remote command execution and privilege escalation, though this specific CVE only details information disclosure. There is no evidence of active exploitation, Metasploit modules, or significant community discussion.