CVE-2006-6328

Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the aliasfile parameter...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

CVE-2006-6331

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...

CVE-2006-6330

CVE-2006-6330 affects TorrentFlux 2.2. The vulnerability is in index.php where the kill parameter accepts shell metacharacters, allowing remote registered users to execute arbitrary commands. Root cause: unsafely handling the kill parameter enables command execution via the shell. Impact is descr...

CVE-2006-6328

CVE-2006-6328 affects TorrentFlux 2.2, specifically index.php, where directory traversal is possible through sequences in the alias_file parameter. This can allow remote attackers to create or overwrite arbitrary files. The description explicitly ties the vulnerability to TorrentFlux 2.2 and the ...

CVE-2006-6331

CVE-2006-6331 affects TorrentFlux 2.2. When $cfg["enable_file_priority"] is false, remote attackers can execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to details.php and startpop.php. This is a remote, unauthenticated command-injection affecting the web-f...

CVE-2006-6329

CVE-2006-6329 affects TorrentFlux 2.2. The vulnerability: index.php permits remote deletion of files by supplying the target filename in the delfile parameter. This is a remote, unauthenticated-like action (network impact) with potential partial integrity/availability impact as per the NVD CVSS, ...

CVE-2006-6331

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...

CVE-2006-6329

index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter...

CVE-2006-6328

Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the aliasfile parameter...

CVE-2006-6330

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter...

TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities

r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15...

torrentflux22.txt

r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15 Discovered By: r0ut3r writ3r at gmail.com Criticality: Highly critical Note...

TorrentFlux <= 2.2 (Create/Exec/Delete) Multiple Remote Vulnerabilities

No description provided by source. r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15...

torrentflux 2.2 - Arbitrary File Create ExecuteDelete

torrentflux 2.2 - Arbitrary File Create ExecuteDelete r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15...

TorrentFlux <= 2.2 (Create/Exec/Delete) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= TorrentFlux = 2.2 Create/Exec/Delete Multiple Remote Vulnerabilities ======================================================================= r0ut3r Presents... Another...

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15...

CVE-2006-5609

Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "../" sequences in the dir parameter...

CVE-2006-5609

Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "../" sequences in the dir parameter...

CVE-2006-5609

CVE-2006-5609 describes a directory traversal vulnerability in TorrentFlux 2.1’s dir.php that allows remote attackers to list arbitrary directories by using ".../" sequences in the dir parameter. Based on connected documents, the issue is linked to TorrentFlux 2.1 (and related notes to 2.2 varian...