PT-2006-6941 · Torrentflux · Torrentflux

R0Ut3R · Publicado 2006-12-06 · Atualizado 2017-10-19 · CVE-2006-6329

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.2

Description The issue allows remote attackers to delete files by specifying the target filename in the delfile parameter in the index.php file.

Recommendations For TorrentFlux version 2.2, restrict access to the delfile parameter in the index.php file to prevent unauthorized file deletion.

Exploit

Correção

Identificadores relacionados

CVE-2006-6329

Produtos afetados

Torrentflux

Referências · 5

• 🔥 https://exploit-db.com/exploits/2786 · Exploit
• http://secunia.com/advisories/22880 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6329 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6329 · Nota