medium4.9Public exploit code
CVE-2006-6328
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- torrentflux 2.2 - Arbitrary File Create/ Execute/Delete2006-11-15 · webapps · php · Verified
Impact
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torrentflux | Torrentflux | Version 2.2 |