Vulnerabilities > CVE-2006-6328 - Directory Traversal vulnerability in Torrentflux 2.2
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
SINGLE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | TorrentFlux <= 2.2 (Create/Exec/Delete) Multiple Remote Vulnerabilities. CVE-2006-6328,CVE-2006-6329,CVE-2006-6330. Webapps exploit for php platform |
| file | exploits/php/webapps/2786.txt |
| id | EDB-ID:2786 |
| last seen | 2016-01-31 |
| modified | 2006-11-15 |
| platform | php |
| port | |
| published | 2006-11-15 |
| reporter | r0ut3r |
| source | https://www.exploit-db.com/download/2786/ |
| title | torrentflux <= 2.2 create/exec/delete Multiple Vulnerabilities |
| type | webapps |