133 matches found
TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== TorrentFlux 2.2 maketorrent.php Remote Command Execution Exploit ================================================================== The variable announce in maketorrent.php...
TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit
No description provided by source. The variable announce in maketorrent.php is not sanitised before being used. The announce variable goes through various stages throughout the script, then it is passed as a into an exec function. This occurs in the middle of the string which is passed to the exe...
TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure
Description: TorrentFlux fails to sanitise the variable "alias" in downloaddetails.php. This allows an attacker to include any file they want; the contents is displayed at in the spaces provided and the remaning data is displayed as error messages on the page. Overall Torrentflux makes it look...
CVE-2006-6328
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the aliasfile parameter...
CVE-2006-6328
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the aliasfile parameter...
CVE-2006-6330
index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...
CVE-2006-6329
index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter...
CVE-2006-6330
index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...
CVE-2006-6331
metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...
CVE-2006-6328
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the aliasfile parameter...
CVE-2006-6330
index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...
CVE-2006-6329
index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter...
CVE-2006-6331
metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...
CVE-2006-6329
CVE-2006-6329 affects TorrentFlux 2.2. The vulnerability: index.php permits remote deletion of files by supplying the target filename in the delfile parameter. This is a remote, unauthenticated-like action (network impact) with potential partial integrity/availability impact as per the NVD CVSS, ...
CVE-2006-6330
CVE-2006-6330 affects TorrentFlux 2.2. The vulnerability is in index.php where the kill parameter accepts shell metacharacters, allowing remote registered users to execute arbitrary commands. Root cause: unsafely handling the kill parameter enables command execution via the shell. Impact is descr...
CVE-2006-6328
CVE-2006-6328 affects TorrentFlux 2.2, specifically index.php, where directory traversal is possible through sequences in the alias_file parameter. This can allow remote attackers to create or overwrite arbitrary files. The description explicitly ties the vulnerability to TorrentFlux 2.2 and the ...
CVE-2006-6331
CVE-2006-6331 affects TorrentFlux 2.2. When $cfg["enable_file_priority"] is false, remote attackers can execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to details.php and startpop.php. This is a remote, unauthenticated command-injection affecting the web-f...
CVE-2006-6331
metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...