CVE-2014-6028

Publication date

2014-09-05 14:00:00

Family

mitre

State

PUBLISHED

Description

TorrentFlux 2.4 allows remote authenticated users to obtain other users cookies via the cid parameter in an editCookies action to profile.php.