CVE-2008-6584

MEDIUM 6.0CVE-2008-6584 · Published 03/04/2009 · updated 16/06/2026

In short

CVE-2008-6584 is a MEDIUM (CVSS 6.0) vulnerability affecting torrentflux (torrentflux).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 81.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
torrentflux torrentflux	`= 2.3`	No fix yet

Description

html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the url_upload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory.

References

osvdb.org/44645
secunia.com/advisories/29935 · Vendor Advisory
securityfocus.com/archive/1/491066/100/0/threaded
securityfocus.com/bid/28846 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/41925

More vulnerabilities in torrentflux

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

torrentflux

= 2.3

No fix yet

More vulnerabilities in torrentflux

See all →