CVE-2006-6599

TorrentFlux 2.2 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6599. PoCs published by r0ut3r.

AI-analyzed exploit summary This exploit targets a command injection vulnerability in TorrentFlux 2.2 via the unsanitized 'announce' parameter in maketorrent.php. It leverages an authenticated session to inject arbitrary commands through an HTTP GET request, terminating the intended command with semicolons to bypass additional script logic.

Description

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by r0ut3r · perlwebappsphp
https://www.exploit-db.com/exploits/2903

This exploit targets a command injection vulnerability in TorrentFlux 2.2 via the unsanitized 'announce' parameter in maketorrent.php. It leverages an authenticated session to inject arbitrary commands through an HTTP GET request, terminating the intended command with semicolons to bypass additional script logic.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TorrentFlux 2.2
Auth required
Prerequisites: Valid TorrentFlux user credentials · Network access to the target · Perl environment for execution
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23270
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21526
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2903
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30850

Scores

EPSS 0.0254
EPSS Percentile 82.9%

Details

Status published
Products (1)
torrentflux/torrentflux 2.2
Published Dec 15, 2006
Tracked Since Feb 18, 2026