⌘ + K

Torrentflux

Dashboard / Vendors

Products: 2

Vulnerabilities: 13

Known Exploited: 0

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Vulnerabilities

100806040200

JanFebMarAprMayJunJulAugSepOctNovDec

Critical Level Threats

High Level Threats

Medium Level Threats

Low Level Threats

Products Security index

Actions

Items Per Page

Vulnerabilities

CVE-2008-6584

html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the url_upload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory.

Last Modified: Apr 23, 2026

Published: Apr 03, 2009

CVE-2008-6585

Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action.

Last Modified: Apr 23, 2026

Published: Apr 03, 2009

CVE-2006-6604

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328.

Last Modified: Apr 23, 2026

Published: Dec 15, 2006

CVE-2006-6600

Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609.

Last Modified: Apr 23, 2026

Published: Dec 15, 2006

CVE-2006-6599

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.

Last Modified: Apr 23, 2026

Published: Dec 15, 2006

Items Per Page