Vulnerabilities > CVE-2006-6330 - Remote Security vulnerability in Torrentflux 2.2

047910
CVSS 6.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
torrentflux
exploit available

Summary

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter.

Vulnerable Configurations

Part Description Count
Application
Torrentflux
1

Exploit-Db

descriptionTorrentFlux <= 2.2 (Create/Exec/Delete) Multiple Remote Vulnerabilities. CVE-2006-6328,CVE-2006-6329,CVE-2006-6330. Webapps exploit for php platform
fileexploits/php/webapps/2786.txt
idEDB-ID:2786
last seen2016-01-31
modified2006-11-15
platformphp
port
published2006-11-15
reporterr0ut3r
sourcehttps://www.exploit-db.com/download/2786/
titletorrentflux <= 2.2 create/exec/delete Multiple Vulnerabilities
typewebapps