CVE-2006-6604

2006-12-1522:00:00

mitre

www.cve.org

AI Score

Confidence

Low

EPSS

0.004

Percentile

72.9%

JSON

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via … (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328.

References

secunia.com/advisories/23270

www.securityfocus.com/bid/21525

exchange.xforce.ibmcloud.com/vulnerabilities/30831

www.exploit-db.com/exploits/2902