CVE-2006-6330

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• torrentflux 2.2 - Arbitrary File Create/ Execute/Delete2006-11-15 · webapps · php · Verified

Impact

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter.

Affected products

References

• NVD record
• CVE.org record
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582
• http://secunia.com/advisories/22880
• https://www.exploit-db.com/exploits/2786
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582
• http://secunia.com/advisories/22880
• https://www.exploit-db.com/exploits/2786