CVE-2006-5451
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
4Exploited in Wild
-Decision
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) file, and (3) users array variables in (a) admin.php, which are not properly handled when the administrator views the Activity Log; and the (4) torrent parameter, as used by the displayName variable, in (b) startpop.php, different vectors than CVE-2006-5227.
Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en TorrentFlux 2.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante las variables de tipo array (1) action, (2) file, y (3) users en (a) admin.php, las cuales no son manejadas adecuadamente cuando el administrador mira el registro de actividad (Activity Log); y el parámetro (2) torrent, tal y como se usa en la variable displayName, en (b) startpop.php, vectores diferentes de CVE-2006-5227.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2006-10-23 CVE Reserved
- 2006-10-23 CVE Published
- 2023-12-19 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (12)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/archive/1/448619/100/100/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/448947/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/448948/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/448952/100/0/threaded | Mailing List | |
http://www.securityfocus.com/bid/20534 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/29592 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://secunia.com/advisories/22384 | 2018-10-17 | |
http://www.vupen.com/english/advisories/2006/4043 | 2018-10-17 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Torrentflux Search vendor "Torrentflux" | Torrentflux Search vendor "Torrentflux" for product "Torrentflux" | 2.1 Search vendor "Torrentflux" for product "Torrentflux" and version "2.1" | - |
Affected
|