CVE-2006-5451: XSS
Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) file, and (3) users array variables in (a) admin.php, which are not properly handled when the administrator views the Activity Log; and the (4) torrent parameter, as used by the displayName variable, in (b) startpop.php, different vectors than CVE-2006-5227.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5451?
CVE-2006-5451 is considered to have moderate severity due to its potential for cross-site scripting attacks.
How do I fix CVE-2006-5451?
To fix CVE-2006-5451, upgrade to a patched version of TorrentFlux that addresses the XSS vulnerabilities.
What types of vulnerabilities are described in CVE-2006-5451?
CVE-2006-5451 describes multiple cross-site scripting (XSS) vulnerabilities affecting TorrentFlux 2.1.
Which parts of TorrentFlux are affected by CVE-2006-5451?
CVE-2006-5451 affects the admin.php file, specifically the variables action, file, and users array.
Can CVE-2006-5451 be exploited by remote attackers?
Yes, CVE-2006-5451 can be exploited by remote attackers to inject arbitrary web scripts or HTML.