CVE-2008-6584: Code Injection
html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the urlupload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6584?
CVE-2008-6584 has a high severity level due to the potential for remote code execution.
How do I fix CVE-2008-6584?
To fix CVE-2008-6584, it is recommended to upgrade to a patched version of TorrentFlux that addresses this vulnerability.
What are the potential impacts of CVE-2008-6584?
The potential impacts of CVE-2008-6584 include unauthorized access to the server and execution of arbitrary code by authenticated users.
Who is affected by CVE-2008-6584?
CVE-2008-6584 affects users of TorrentFlux version 2.3 who allow remote authenticated access.
Is CVE-2008-6584 easy to exploit?
CVE-2008-6584 is considered relatively easy to exploit, especially by authenticated users with knowledge of the application.