Lucene search
HistoryDec 06, 2006 - 9:28 p.m.
CVE-2006-6331
cve-2006-6331
torrentflux
remote execution
shell metacharacters
command injection
7.9 High
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.1%
metaInfo.php in TorrentFlux 2.2, when $cfg[“enable_file_priority”] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| torrentflux:torrentflux | torrentflux | eq | 2.2 |
Related
cvelist
cvelist
CVE-2006-6331
2006-12-06 21:00:00
ubuntucve
ubuntucve
CVE-2006-6331
2006-12-06 00:00:00
7.9 High
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.1%
Related for CVE-2006-6331