medium6.5Public exploit code
CVE-2006-6598
Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure2006-12-09 · webapps · php · Verified
Impact
Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torrentflux | Torrentflux | through 2.2 |
| Torrentflux | Torrentflux-B4rt | through 2.1_b4rt971 Versions 2.1_b4rt3, 2.1_b4rt4, 2.1_b4rt5, 2.1_b4rt6, 2.1_b4rt7 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23402
- http://tf-b4rt.berlios.de/changelog-torrentflux_2.1-b4rt.txt
- http://www.securityfocus.com/bid/21613
- https://www.exploit-db.com/exploits/2902
- http://secunia.com/advisories/23402
- http://tf-b4rt.berlios.de/changelog-torrentflux_2.1-b4rt.txt
- http://www.securityfocus.com/bid/21613
- https://www.exploit-db.com/exploits/2902