CVE-2006-6598

TorrentFlux <2.2 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r0ut3r · perlwebappsphp

https://www.exploit-db.com/exploits/2902

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/21613

[Exploit] http://tf-b4rt.berlios.de/changelog-torrentflux_2.1-b4rt.txt

[Vendor Advisory] http://secunia.com/advisories/23402

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2902

Scores

EPSS 0.0577

EPSS Percentile 90.5%

Details

Status published

Products (27)

torrentflux/torrentflux < 2.2

torrentflux/torrentflux-b4rt 2.1_b4rt3

torrentflux/torrentflux-b4rt 2.1_b4rt4

torrentflux/torrentflux-b4rt 2.1_b4rt5

torrentflux/torrentflux-b4rt 2.1_b4rt6

torrentflux/torrentflux-b4rt 2.1_b4rt7

torrentflux/torrentflux-b4rt 2.1_b4rt8

torrentflux/torrentflux-b4rt 2.1_b4rt9

torrentflux/torrentflux-b4rt 2.1_b4rt61

torrentflux/torrentflux-b4rt 2.1_b4rt81

... and 17 more

Published Dec 15, 2006

Tracked Since Feb 18, 2026