What’s Vulnerable › Vulnerabilities

CVE-2006-6331

• Severity: medium (CVSS 6.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-12-06 · updated 2026-06-16

Description

metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote attackers to execute arbitrary commands via shell metacharacters (backticks) in the torrent parameter to (1) details.php and (2) startpop.php.

Affected products

• Torrentflux: 2.2

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi/11_missed_security_fixes.dpatch?bug=400582%3Bmsg=71%3Batt=1
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582
• http://secunia.com/advisories/23270
• http://bugs.debian.org/cgi-bin/bugreport.cgi/11_missed_security_fixes.dpatch?bug=400582%3Bmsg=71%3Batt=1
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582
• http://secunia.com/advisories/23270

Get alerted when CVE-2006-6331 or the next vulnerability affects your stack