← Database

CVE-2008-6585

MEDIUM CVSS: 6.8 Published: 2009-04-03 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action.

Affected Platforms

Torrentflux Torrentflux

Weakness Type

CWE-352

References