CVE-2006-6604: Undefined Security Weakness

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. dot dot sequences in the alias parameter, a different vector than CVE-2006-6328...

TorrentFlux 2.2 - downloaddetails.php Local File Disclosure

TorrentFlux 2.2 - downloaddetails.php Local File Disclosure Description: TorrentFlux fails to sanitise the variable "alias" in downloaddetails.php. This allows an attacker to include any file they want; the contents is displayed at in the spaces provided and the remaning data is displayed as erro...

TorrentFlux 2.2 (downloaddetails.php) Local File Disclosure Exploit

Exploit for unknown platform in category web applications =================================================================== TorrentFlux 2.2 downloaddetails.php Local File Disclosure Exploit =================================================================== Description: TorrentFlux fails to...

TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure

Description: TorrentFlux fails to sanitise the variable "alias" in downloaddetails.php. This allows an attacker to include any file they want; the contents is displayed at in the spaces provided and the remaning data is displayed as error messages on the page. Overall Torrentflux makes it look...

CVE-2006-6233: Undefined Security Weakness

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...