Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2006-6604

Disclosure Date: December 15, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328.
0
0
Attacker Value
Unknown

CVE-2006-6599

Disclosure Date: December 15, 2006 (last updated October 04, 2023)
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.
0
0
Attacker Value
Unknown

CVE-2006-6328

Disclosure Date: December 06, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter.
0
0
Attacker Value
Unknown

CVE-2006-6330

Disclosure Date: December 06, 2006 (last updated October 04, 2023)
index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter.
0
0
Attacker Value
Unknown

CVE-2006-6331

Disclosure Date: December 06, 2006 (last updated October 04, 2023)
metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php.
0
0
Attacker Value
Unknown

CVE-2006-6329

Disclosure Date: December 06, 2006 (last updated October 04, 2023)
index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter.
0
0