6 matches found
CVE-2014-6027
Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.4 allow 1 remote attackers to inject arbitrary web script or HTML by leveraging failure to encode file contents when downloading a torrent file or 2 remote authenticated users to inject arbitrary web script or HTML via vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in TorrentFlux 2.4 allow 1 remote attackers to inject arbitrary web script or HTML by leveraging failure to encode file contents when downloading a torrent file or 2 remote authenticated users to inject arbitrary web script or HTML via vectors...
CVE-2014-6027
CVE-2014-6027 affects TorrentFlux 2.4 with multiple cross-site scripting (XSS) vulnerabilities. An attacker can craft torrent content or links to torrent details to inject arbitrary script/HTML in a victim’s browser. Descriptions across multiple sources (NVD/CNVD/Ubuntu CVE page) confirm two vect...
CVE-2014-6028
TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...