CVE-2005-4448

CVE-2005-4448 describes an authentication bypass vulnerability in FlatNuke 2.5.6, where the system verifies credentials using an MD5 checksum of the admin name and hashed password instead of the plaintext password. This allows attackers to gain privileges by obtaining the password hash and crafting a valid secid cookie. The vulnerability has a critical CVSS score of 10.0, indicating a network-based attack with low complexity and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.