Security Advisory

CVE-2006-6598

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-12-15 22:00:00
Last updated 2024-08-07 20:33:59
Assigner mitre
State PUBLISHED

Description

Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.