medium4.9Public exploit code
CVE-2006-6329
index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- torrentflux 2.2 - Arbitrary File Create/ Execute/Delete2006-11-15 · webapps · php · Verified
Impact
index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torrentflux | Torrentflux | Version 2.2 |