CVE:CVE-2005-0267
CNNVD:CNNVD-200505-166
FlatNuke 2.5.1中的index.php允许远程攻击者通过回车和url_avatar字段的#10来创建管理员帐户，从而将其解释为敏感指令。
solution:Upgrade flatnuke flatnuke to a higher version than 2.5.1,and avoid the version 2.5.1