CVE Daily

CVE-2006-6604

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allo...

Medium CVSS 6.5

Overview

Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328.

CWE: N/A Published: 2006-12-15T22:28:00.000
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags