CVE-2006-5451

概要

参考情報

• secunia.com/advisories/22384 · Vendor Advisory
• securityfocus.com/archive/1/448619/100/100/threaded
• securityfocus.com/archive/1/448947/100/0/threaded
• securityfocus.com/archive/1/448948/100/0/threaded
• securityfocus.com/archive/1/448952/100/0/threaded
• securityfocus.com/bid/20534
• stevenroddis.com.au/2006/10/13/torrentflux-startpopphp-torrent-script-insertion · Exploit
• stevenroddis.com.au/2006/10/17/torrentflux-action-script-insertion · Exploit
• stevenroddis.com.au/2006/10/17/torrentflux-file-script-insertion · Exploit
• stevenroddis.com.au/2006/10/17/torrentflux-user_id-script-insertion · Exploit
• vupen.com/english/advisories/2006/4043 · Vendor Advisory

torrentflux のその他の脆弱性

• CVE-2008-6585中 6.8Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of…
• CVE-2008-6584中 6.0html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable…
• CVE-2006-6604中 6.5Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via ..…
• CVE-2006-6600中 6.0Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML …
• CVE-2006-6599中 6.0maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) …