Vulnerability in Torrentflux
CVE-2006-6598
Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.
EPSS: 0.026 (83.4th percentile) — read the EPSS interpretation.
Affected products
- Torrentflux
- Torrentflux Torrentflux-b4rt — versions 2.1_b4rt3, 2.1_b4rt4, 2.1_b4rt5
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)