PT-2006-6941 · Torrentflux · Torrentflux

R0Ut3R · Published 2006-12-06 · Updated 2017-10-19 · CVE-2006-6329

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions TorrentFlux version 2.2

Description The issue allows remote attackers to delete files by specifying the target filename in the delfile parameter in the index.php file.

Recommendations For TorrentFlux version 2.2, restrict access to the delfile parameter in the index.php file to prevent unauthorized file deletion.

Exploit

Fix

Related Identifiers

CVE-2006-6329

Affected Products

Torrentflux

References · 5

• 🔥 https://exploit-db.com/exploits/2786 · Exploit
• http://secunia.com/advisories/22880 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6329 · Security Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6329 · Note