CVE-2014-6029

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

Code injection

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

CVE-2014-6028

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...

CVE-2014-6029

CVE-2014-6029 affects TorrentFlux 2.4. The vulnerability arises in the editCookies action to profile.php, where the cid parameter allows remote authenticated users to delete or modify other users’ cookies. Reported impact includes partial integrity risk of cookies; confidentiality/availability im...

PT-2014-7012

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.4 Description The issue allows remote authenticated users to delete or modify other users' cookies. This can be achieved by manipulating the cid parameter in an editCookies action to the "profile.php" endpoint...

PT-2014-7011

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.4 Description The issue allows remote authenticated users to obtain other users' cookies via the cid parameter in an "editCookies action" to "profile.php". Recommendations For TorrentFlux version 2.4, consider restricting...