← Database

CVE-2006-6331

MEDIUM CVSS: 6.0 Published: 2006-12-06 Modified: 2026-06-16

Description

metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php.

Affected Platforms

Torrentflux Torrentflux

Weakness Type

NVD-CWE-Other

References